1. March 25, 2009 Jean-Henry Morin University of Geneva CUI Dept. of Information Systems Switzerland [email_address] http://jean- henry.com /Panel on The Future of DRM Webcast & Transcript available here : http:// www.ftc.gov/bcp/workshops/drm /

2. How did we get here a dystopian society ? Digital Rights ManagementMarch 25, 2009 http:// www.flickr.com/search/?q =DRM 3. Where did we go wrong?

Where didUser Experiencego ?

Where didSuperdistributiongo ?

Where are the newinnovative Business Models , theReal-time Marketers , etc. ?

Did DRMcurbthose that it meant ?

Wasnt DRM supposed to be anenabler?

Digital Rights ManagementMarch 25, 2009 4. The Future of DRM

Assuming :

• DRM is likely to stay and be needed (managed content)

• Absolute security is neither achievable nor desirable

• Given the rightUser ExperienceandBusiness Modelsmost users would smoothly comply

• Most users arent criminals

We need to take a step back to :

• Critically re-think DRM altogether

• Reconsider the debate outside theeither/orextremes of total vs. no security

• Re-design DRM from group up

Digital Rights ManagementMarch 25, 2009 5. Rethinking & Redesigning DRM (I)

Central role of theUserandUser Experience

• Reinstate Users in their roles & rights

• Presumption of innocence & the burden of proof

A Fundamental guiding principle to re-think & re-design DRM : Feltens Copyright Balance principle (Felten, 2005)

• Since lawful use, including fair use, of copyrighted works is in the public interest, a user wishing to makelawful useof copyrighted materialshould not be preventedfrom doing so by any DRM system.

Claim:

• Put the trust back into the hands of the users

Digital Rights ManagementMarch 25, 2009 6. Rethinking & Redesigning DRM (II)

Exception Management in DRM, mixing water with fire ?

• Reverse the distrust assumption

• Allow Users to makeException Claimsand be granted Short Lived Licenses

• Credentialbased,revocable in case of abuse detection / monitoring

• Acknowledging the need forManaged Content

Digital Rights ManagementMarch 25, 2009 7. Conclusion

Can DRM go green before we all go dark ?

Moving forward :

• Critically re-think DRM

• Creatively re-design DRM

• Involve equally all stakeholders

• Find new innovative Business Models

• Limit law to a justifiable level

• Remember technology is just the means

Digital Rights ManagementMarch 25, 2009 8. References

Thank you for your attention

http://jean- henry.com /

J.-H. Morin, Rethinking DRM Using Exception Management , chapter III inHandbook of Research on Secure Multimedia Distribution , S. Lian and Y. Zhang (Eds), Information Science Reference (ISR), ISBN: 978-1-60566-262-6, IGI Global, March 2009.

http://www.igi-global.com/reference/details.asp?id =33143

J.-H. Morin, Exception Based Enterprise Rights Management : Towards a Paradigm Shift in Information Security and Policy Management ,International Journal On Advances in Systems and Measurements , issn 1942-261x, vol. 1, no. 1, 2008, pp. 40-49.

http:// www.iariajournals.org/systems_and_measurements /

Digital Rights ManagementMarch 25, 2009 Webcast & Transcript available here : http:// www.ftc.gov/bcp/workshops/drm /