Apple FairPlay DRM
Apple’s FairPlay Streaming (FPS) DRM can securely deliver streaming media to client devices through the HTTP live streaming protocol.
Trusted by the world’s most-recognized companies.
About Apple FairPlay DRM
Apple’s FairPlay Streaming (FPS) DRM can securely deliver streaming media to client devices through the HTTP live streaming protocol. With FPS technology, content providers, encoding vendors, and content delivery networks (CDNs) can encrypt content, safely exchange content, and protect playback in iOS, tv OS, watch OS, and Safari browser on macOS and iOS.
Benefits of Apple FairPlay DRM
Enterprise protection of your HLS audio and video
Uses and established key system already adopted throughout the industry
Native to iOS, watchOS, Apple TV, and macOS (formerly known as OS X)
Efficient power consumption on mobile devices
Full integration with Apple AirPlay
Licensed with no cost through the Apple Developer Program
Features of Apple Fairplay DRM
Hardware DRM support
All client environments that support FPS DRM, such as Mac OS, iOS,watchOS and tvOS, are highly secure at the hardware level. Widevine DRM can also be applied to Apple devices via the Chrome browser for Mac OS or the Widevine CDM SDK for iOS, but that is not suitable for premium content security because hardware DRM is not available.
FPS DRM is a must for content that requires a high level of security, such as the early-window movies from Hollywood studios.
Apple AirPlay support
FPS DRM natively supports Airplay, Apple’s wireless content delivery protocol. FPS content on Apple devices can be played on Apple TV through AirPlay without any additional coding.
Key delivery and decryption of FPS content played through Airplay is performed on Apple TV, the target device, with the same level of security as playing on the original device such as the iPhone.
Download and offline playback
Starting with iOS 10, download and offline playback of FPS content are supported. The relevant APIs provided by the OS can be used to handle downloading and managing HLS content with offline licenses.
Supported ecosystem of Apple Fairplay Streaming
Platform
Version
PC
- macOS 11 or later: Safari browser
Mobile
- iOS 11.0 or later: iOS native app
- iOS 11.2 or later: iOS Safari browser
- iPadOS 13.1 or later
Watch
- watchOS 7 or later
OTT
- Apple TV: tvOS 11.0 or later
Support formats for Apple FairPlay
Formats
Protocols
Streaming
- HLS, CMAF
Video
- TS, fMP4 container
Video Codec
- AVC(H.264), HEVC(H.265)
Audio Codec
- AAC, MP3
Integration if you use Free Widevine service Directly from Google
For integration with Apple, you will need an Apple developer account which will be charged for $99/year. There are various components involved in order to have Apple Fairplay Service implemented listed below:
Key server and Key Security Module (KSM)
The key server manages the keys used for encrypting/decrypting DRM content. DRM solution or content service provider can implement a Key Security Module for FPS on their own key server by referring to the KSM sample provided by Apple.
KSM validates the key request data sent from the client and securely passes the requested content key.
Client Application
The FPS client app runs on Apple devices OS such as iOS, tvOS, watchOS and macOS. It requests the key for FPS content to the key server and processes the response.
Content service providers can use Apple’s sample code to develop their own FPS client app or use a FPS SDK provided by a DRM solution provider.
FPS Content
To apply FPS to HLS content, each HLS segment must be encrypted by SAMPLE-AES method. The encryption method used for FPS content is AES-128 CBCS.
Using packages or solutions that support FPS packaging, such as Shaka Packager, the KEY tag can be added to the m3u8 playlist of encrypted HLS content with related information.
DIY Apple Fairplay
FairPlay Streaming flow on iOS/tvOS
1. Client app notifies the OS’s AVFoundation framework to play FPS content
2. AVFoundation downloads HLS playlist (m3u8) from content server and checks KEY tag
3. AVFoundation requests the key of the content from the client app (AVFoundation Delegate)
4. App Delegate requests Server Playback Context (SPC) data from AVFoundation
5. App Delegate sends generated FPS SPC data to key server
6. Key server interprets SPC data through KSM module and retrieves key required for content playback from key DB
7. The key server sends the retrieved content key to the client app in the form of Content Key Context (CKC) data.
8. AVFoundation Delegate in Client app enters CKC data into AVFoundation
9. AVFoundation decrypts and plays content securely using keys contained in CKC data. In Mac OS and iOS Safari, content key transfer and playback is similar to the above process. In this case, the Content Decryption Module (CDM) and Encrypted Media Extension (EME) standards built into the Safari browser are used instead of the implementation in the client app.
Why Choose DoveRunner Widevine
Simple setup
Offline Support
Pay as you go with Multi DRM service (WV,FPS and PR in a single workflow)
- No need to develop and manage individual components like Key server and Key Security Module (KSM), Client application, and FPS Content.
- DoveRunner manages and provides a key exchange server, keeps updating the service as per Fairplay updates.
- Provides service in both API based and SDK based models.
Integration Document (with DoveRunner)
DoveRunner Multi DRM service provides integration APIs and SDKs to support various client environments such as PC, mobile, OTT, TV platforms.
DoveRunner Multi DRM service provides integrated DRM license management and client integration of PlayReady, Widevine, and FairPlay easily and quickly.
5 Things You Need To Know About Multi-DRM Technology
Resources for Effective Security
Blog
- 7 min read
Forensic Watermarking for Premium Online Video Contents
With the growing popularity of video streaming, OTT platforms, studios, and pay-TV operators are making
Case Studies
- 1 min read
AppSealing prevents money leakage in a real-money mobile-gaming platform
Challenges With different types of mobile game cheat tools and emulators being available in the
Whitepaper
- 1 min read
Guide to Web3 Gaming Threats and Security
Discover how to protect Web3 gaming applications from emerging threats and vulnerabilities. Learn key strategies
You have questions.
We have answers.
From mobile application protection to safeguarding your content, get quick answers to many of your security questions.
What security features does DoveRunner provide?
DoveRunner offers mobile app security and content protection solutions, including real-time threat analytics, app integrity protection, DRM, forensic watermarking, and anti-piracy measures.
How does DoveRunner protect mobile apps?
We provide code encryption, runtime application self-protection (RASP), anti-tampering, anti-reverse engineering, and fraud prevention to secure your mobile apps from cyber threats.
What content security solutions does DoveRunner offer?
DoveRunner protects premium content with multi-DRM licensing, forensic watermarking, and anti-piracy monitoring to prevent unauthorized access, leaks, and distribution.
Is DoveRunner’s security easy to integrate?
Yes! Our security solutions come with easy SDKs, APIs, and cloud-based integration for quick deployment without disrupting user experience.
Can I get a trial before committing?
Yes, we offer a 30-day free trial so you can explore our security features and see how they protect your apps and content.
Other DoveRunner Services
Forensic Watermarking
DoveRunner Forensic Watermarking is a cloud-based SaaS service that allows you to quickly and easily apply watermarking without building complex server environments.
Distributor Watermarking
Distributor Watermarking for B2B to secure your premium content during post production workflows & B2B distribution (30sec clip enough for detection).
