PlayReady: What It Is, DRM from Microsoft and Versions

What is PlayReady?

PlayReady is a digital rights management (DRM) technology developed by Microsoft in 2007 to protect media content and other digital assets. It replaced WMDRM (Windows Media DRM) and became the standard protection for Windows Media Center, Xbox Video and Microsoft Silverlight.

The main advantage of PlayReady is a unified licensing system for various types of content: video, audio, e-books, games and documents. The technology supports Subscription, Rental and Purchase distribution models, making it attractive for media services and educational platforms.

PlayReady Architecture

The PlayReady architecture consists of three key components: the PlayReady Device Porting Kit client runtime, the PlayReady License Server and the content packager. The PlayReady Runtime is embedded into an application or player and handles content decryption on the device.

The license server generates license keys based on policies set by the content provider. The content packager encrypts media files using Common Encryption (CENC) standard and embeds metadata to link with a specific license.

How Does PlayReady DRM Work?

The protection process PlayReady begins at the packaging stage, when media content is encrypted with a symmetric key, which is then protected by the license server’s public key. The packaged content is placed on a CDN and is available for download or streaming.

When a user requests protected content, the player initiates a license request to the license server. The server checks the user’s credentials, their access rights (subscription, rental, purchase) and issues a license containing the decryption key.

License Exchange Protocol

PlayReady uses a SOAP or JSON-based exchange protocol, where the license request includes the Content ID, device identifier and application signature. The server returns the license in XML format, encrypted with the device’s public key.

The license contains the Content Encryption Key (CEK), wrapped in a Device Key, and a set of policies. Policies can restrict playback time, video quality, number of devices and output type (HDMI, composite).

Initializing a PlayReady Session

var mediaProtectionManager = new MediaProtectionManager();
var properties = new PropertySet();
properties["Windows.Media.Protection.MediaProtectionSystemId"] =
    "9a22f0a1-9e6c-4f2d-bc8e-4d8d5a2c3f1e";

mediaProtectionManager.SetProtectionScheme(
    MediaProtectionSystemType.PlayReady,
    properties
);

var mediaSource = MediaSource.CreateFromUri(
    new Uri(contentUrl)
);
mediaPlayer.Play(mediaSource);

PlayReady Versions: 3.0 and 4.0

PlayReady 3.0, released in 2014, introduced hardware encryption support via TPM 2.0 and the SL3000 security level for 4K content. This version added the ability to bind a license to a specific device through a Device Binding mechanism, preventing license transfer between devices.

PlayReady 4.0, announced in 2020, expanded functionality with three key innovations: support for advanced content usage telemetry, improved analytics for content providers and optimized power consumption on mobile devices.

PlayReady Version Comparison

PlayReady Security Levels

Security Levels PlayReady determine how cryptographic operations are performed and the maximum content resolution. SL150 is a fully software implementation, SL2000 requires partial hardware support, SL3000 is full hardware encryption with TPM.

Devices with SL3000 can play 4K HDR content, and decryption keys never leave the protected TPM area. SL2000 is limited to 1080p, SL150 is limited to 720p and is only suitable for desktop browsers without hardware protection.

PlayReady Licensing and Policies

The licensing system PlayReady is one of the most flexible among DRM solutions. It supports various distribution models: rental with time expiration, purchase with perpetual access, subscription with regular key updates, and preview with limited duration.

Each license contains a set of policies that the license server applies to the content key. Policies can include: maximum video resolution, type of protected output (HDCP mandatory for 4K), number of activations, time restrictions (absolute and relative).

PlayReady Policy Types

• Time-based — time restriction: absolute expiration date or relative period from first playback.
• Output protection — video output type restriction: HDCP mandatory for digital outputs, analog output prohibited.
• Resolution constraint — maximum resolution: 720p, 1080p, 4K depending on device security level.
• Device count — maximum number of devices on which one license can be activated.

License Processing Example

public async Task AcquireLicenseAsync(MediaProtectionManager manager)
{
    var serviceRequest = new PlayReadyLicenseAcquisitionServiceRequest
    {
        ContentHeader = new PlayReadyContentHeader(
            contentKeyId,
            contentUrl,
            licenseServerUrl,
            null
        ),
        DomainServiceId = domainId
    };

    var result = await serviceRequest.BeginServiceRequest();
    if (result == PlayReadyLicenseAcquisitionResult.Success)
    {
        HandleLicenseAcquired(serviceRequest.GetLicenses());
    }
}

PlayReady Integration on Different Platforms

PlayReady is supported on a wide range of platforms, including Windows (UWP, Win32), Xbox, Android (via PlayReady Porting Kit), iOS (limited) and Smart TV (Samsung Tizen, LG webOS). Each platform has its own runtime and API implementation.

On Windows, integration is done through MediaProtectionManager and PlayReady API in the Windows.Media.Protection.PlayReady namespace. On Android, PlayReady Porting Kit is used, which is embedded into the application via NDK and provides Java wrappers for working with DRM.

Integration on Windows (UWP)

In the UWP environment, the application creates an instance of MediaProtectionManager, registers PlayReady as a protection system and configures licensing event handlers. The MediaPlayerElement player automatically handles protected streams if MediaProtectionManager is configured correctly.

The PlayReady License Server can be deployed both on Azure infrastructure and on your own servers. Microsoft provides ready-made PlayReady License Server solutions as part of Azure Media Services, simplifying integration for cloud projects.

Integration on Android

On Android, PlayReady is integrated through the NDK library libplayready.so, which provides a C++ API wrapped in Java classes. ExoPlayer supports PlayReady just like Widevine through the standard MediaDrm API with PlayReady UUID.

PlayReady UUID for MediaDrm is — 9a22f0a1-9e6c-4f2d-bc8e-4d8d5a2c3f1e. When initializing ExoPlayer with PlayReady, the configuration is similar to Widevine: the license server URL, authentication headers and DRM type are specified.

For PlayReady to work correctly on Android, the PlayReady runtime must be installed, which is usually pre-installed on Samsung, LG and other brands that use PlayReady Porting Kit. On devices without a pre-installed runtime, the application must include the libplayready.so library in the APK.

Integration on Smart TV

PlayReady is the dominant DRM on Smart TV platforms, including Samsung Tizen and LG webOS. On these platforms, the built-in runtime PlayReady provides hardware protection at the TV chipset level, allowing 4K HDR content playback without additional configuration.

Integration on Smart TV is done through PlayReady Device Porting Kit for a specific SoC (MediaTek, Realtek, Amlogic). TV manufacturers pre-install the PlayReady runtime at the firmware stage, and applications launch it via the standard EME API in a web player or native application.

For content providers, it is important to note that not all Smart TVs support the highest SL3000 level — older models may be limited to SL2000 and 1080p quality. HDCP compatibility is also mandatory for 4K content output via HDMI.

Security and Telemetry in PlayReady 4.0

PlayReady 4.0 introduced advanced telemetry that allows content providers to obtain detailed information about content usage: viewing time, unauthorized access attempts, device type, runtime version. Telemetry data is collected through a secure channel and digitally signed to prevent tampering.

The revocation mechanism in PlayReady 4.0 allows content providers to block compromised devices or runtime versions in real time. The revocation list is distributed through the license server and updated automatically with each license request, ensuring a prompt response to vulnerabilities.