DRM for video streaming: what it protects and how keys, licenses and packaging work

You are a product manager on a video streaming service at NBCUniversal, and the interviewer wants to check that you understand how premium video is protected. Answer in two parts: first explain what digital rights management (DRM) is, then explain how a streaming platform implements it. ### Clarifying Questions - Should the explanation cover on-demand titles only, or also live channels and episodes downloaded for offline viewing? - Which devices must the service support: web browsers, iPhones and Apple TV, Android phones and TVs, game consoles, smart TVs? - Is the audience for this explanation a business partner who needs the concepts, or an engineering team that needs the component-level flow? ### Part 1 — What DRM is and why a streaming service needs it Define DRM in plain terms. Explain what it protects, which rules it can enforce for a streaming business and the studios that license content to it, and what it cannot prevent. ```hint Separate access from use Signing in decides who may start a stream. Think about what stops an entitled device from saving or passing on the video afterward, and where that rule has to be enforced. ``` #### What This Part Should Cover - A precise definition that separates DRM from sign-in, paywalls and ordinary transport encryption. - Why content licensors require it and the kinds of usage rules it carries. - Its limits and the protections that complement it. ### Part 2 — How a streaming platform implements DRM Walk through the implementation end to end: preparing and encrypting the video, managing keys, delivering the files, and what happens on the device when a viewer presses play. Explain how the service covers every device family it supports. ```hint Follow the key, not the video Encrypted video can sit on any server or CDN. Trace where each decryption key is created and stored, who may ask for it, what is checked before it is released, and where it is finally used. ``` #### What This Part Should Cover - Packaging and encryption of adaptive streams, and why a single DRM system cannot reach every device. - The license flow at playback, including the service's own entitlement check before any key is released. - Device security levels and the policies a license carries, including offline downloads and live streams. ### What a Strong Answer Covers - Accurate technical vocabulary, explained clearly enough for a non-specialist listener. - The product trade-offs DRM creates: content security against device reach, playback start time, playback failures and licensing cost. - The metrics a product manager would use to monitor DRM health and its effect on the viewer experience. ### Follow-up Questions - A studio requires hardware-backed protection for 4K titles, but many of your viewers watch in desktop browsers that only offer software protection. What do you do? - Viewers complain that downloaded episodes stop playing in the middle of a flight. How would you investigate, and which policy or product changes would you consider? - How would you decide between running license servers in-house and using a commercial multi-DRM provider?