Dash-Industry-Forum · sandersaares · Jul 5, 2019 · Sep 4, 2019 · Sep 5, 2019 · Sep 6, 2019
diff --git a/90-Security.inc.md b/90-Security.inc.md
diff --git a/Diagrams/Security/DrmBigPicture.wsd b/Diagrams/Security/DrmBigPicture.wsd
@@ -0,0 +1,29 @@
+@startuml
+
+[DASH presentation] as DASH
+
+[DASH client] as Client
+
+node "Data protected by DRM system" {
+    [Content keys] as Key
+
+    [Media platform] as MediaPlatform
+    [DRM system] as DRM
+}
+
+[License server] as LicenseServer
+[Authorization service] as Authz
+
+Client -down-> DASH : Get MPD\nGet segments
+Client -> MediaPlatform : Provide segments
+Client -down-> DRM : Activate\nProvide licenses
+
+DRM -> MediaPlatform : Decrypted samples
+MediaPlatform --> DRM : Encrypted samples
+
+DRM -> Key : Use
+
+Client -up-> LicenseServer : Get licenses
+Client -up-> Authz : Get authorization tokens
+
+@enduml
diff --git a/Diagrams/Security/KeyHierarchy.wsd b/Diagrams/Security/KeyHierarchy.wsd
@@ -0,0 +1,17 @@
+@startuml
+
+[Root key] as Root
+
+cloud "DRM system specific key association logic" as Mid
+
+[Leaf key] as Leaf1
+[Leaf key] as Leaf2
+[Leaf key] as Leaf3
+
+Root --> Mid
+
+Mid --> Leaf1
+Mid --> Leaf2
+Mid --> Leaf3
+
+@enduml
diff --git a/Diagrams/Security/KeyHierarchyAndDefaultKid.wsd b/Diagrams/Security/KeyHierarchyAndDefaultKid.wsd
@@ -0,0 +1,28 @@
+@startuml
+
+[Root key] as Root
+[Leaf key] as A
+[Leaf key] as B
+[Leaf key] as C
+
+package "MPD" {
+    [default_KID] as DKID
+}
+
+Root -- A
+Root -- B
+Root -- C
+
+DKID -> Root
+
+package "CMAF" {
+    [tenc]
+    [sgpd]
+}
+
+[tenc] -> Root
+[sgpd] -up-> A
+[sgpd] -up-> B
+[sgpd] -up-> C
+
+@enduml
diff --git a/Diagrams/Security/LicenseRequestConcept.wsd b/Diagrams/Security/LicenseRequestConcept.wsd
@@ -0,0 +1,19 @@
+@startuml
+
+participant "DASH client" as Client
+participant "DRM system" as CDM
+participant "License server" as LS
+
+Client -> CDM : Activate for KID 123
+CDM -> CDM : Check stored licenses
+
+alt If no usable license for KID 123 is stored
+    CDM -> Client : License request (opaque blob)
+    Client -> LS : License request (opaque blob)
+    LS -> Client : License response (opaque blob)
+    Client -> CDM : License response (opaque blob)
+end
+
+CDM -> Client : Ready to decrypt KID 123
+
+@enduml
diff --git a/Diagrams/Security/LicenseRequestModel-BaselineArchitecture.wsd b/Diagrams/Security/LicenseRequestModel-BaselineArchitecture.wsd
@@ -0,0 +1,14 @@
+@startuml
+
+participant "DASH client" as Client
+participant "Authorization service" as Authz
+participant "License server" as LS
+
+Client -> Authz : Get authorization token
+Authz -> Authz : Check if user is authorized
+Authz -> Client : Token
+Client -> LS : Get license\n(Token attached)
+LS -> LS : Validate token
+LS -> Client : License
+
+@enduml
diff --git a/Diagrams/Security/LicenseRequestModel-TransparentArchitecture.wsd b/Diagrams/Security/LicenseRequestModel-TransparentArchitecture.wsd
@@ -0,0 +1,13 @@
+@startuml
+
+participant "DASH client" as Client
+participant "License proxy" as Proxy
+participant "License server" as LS
+
+Client -> Proxy : Get license
+Proxy -> Proxy : Check if user is authorized
+Proxy -> LS : Get license\n(Proprietary proof of authorization attached)
+LS -> Proxy : License
+Proxy -> Client : License
+
+@enduml
diff --git a/Diagrams/Security/ReductionOfKeys.wsd b/Diagrams/Security/ReductionOfKeys.wsd
@@ -0,0 +1,23 @@
+@startuml
+
+participant "DASH client" as Client
+participant "DRM system" as DRM
+participant "Authorization service" as Authz
+participant "License server" as LS
+
+Client -> DRM : Configure to decrypt:\n* Key 1 (SD video)\n* Key 2 (HD video)\n* Key 3 (4K video)\n* Key 4 (stereo audio)\n* Key 5 (7.1 audio)
+DRM -> Client : License requests for keys 1-5
+
+Client -> Authz : Authorize keys 1-5
+note left of Authz: User has not purchased 4K quality\nservice plan - cannot use 4K key
+Authz -> Client : Keys 1, 2, 4 and 5 authorized\nKey 3 (4K video) not authorized
+
+Client -> LS : Request licenses
+note left of LS: User's DRM system implementation is not robust enough\nfor HD quality - will not release HD key
+LS -> Client : Licenses for keys 1 (SD), 4 (stereo) and 5 (7.1 audio)
+
+Client -> DRM : Ingest licenses
+note over DRM: Device does not have sufficiently secure 7.1\noutput - will not decrypt using the 7.1 audio key
+DRM -> Client: Configuration complete\nAvailable keys: 1 (SD), 4 (stereo)
+
+@enduml
diff --git a/Diagrams/Security/SoftwareComponents.wsd b/Diagrams/Security/SoftwareComponents.wsd
@@ -0,0 +1,20 @@
+@startuml
+
+package "Media platform" {
+    [Media playback] as MediaSource
+    [DRM system] as PlatformDrm
+}
+
+package "App" {
+    package "Libraries" {
+        [DASH client] as Player
+    }
+
+    [Solution-specific logic and configuration] as AppLogic
+}
+
+Player -down-> PlatformDrm
+Player -down-> MediaSource
+Player -up-> AppLogic
+
+@enduml
diff --git a/Images/Security/AuthzTokenSharingAndSelection.graphml b/Images/Security/AuthzTokenSharingAndSelection.graphml
diff --git a/Images/Security/AuthzTokenSharingAndSelection.png b/Images/Security/AuthzTokenSharingAndSelection.png
diff --git a/Images/Security/CapabilityNegotiation.graphml b/Images/Security/CapabilityNegotiation.graphml
diff --git a/Images/Security/CapabilityNegotiation.png b/Images/Security/CapabilityNegotiation.png
diff --git a/Images/Security/KeyHierarchy-NightlyUpdates.graphml b/Images/Security/KeyHierarchy-NightlyUpdates.graphml
diff --git a/Images/Security/KeyHierarchy-NightlyUpdates.png b/Images/Security/KeyHierarchy-NightlyUpdates.png
diff --git a/Images/Security/SelectionAlgorithm-SystemConfigurations.graphml b/Images/Security/SelectionAlgorithm-SystemConfigurations.graphml
@@ -0,0 +1,193 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<graphml xmlns="http://graphml.graphdrawing.org/xmlns" xmlns:java="http://www.yworks.com/xml/yfiles-common/1.0/java" xmlns:sys="http://www.yworks.com/xml/yfiles-common/markup/primitives/2.0" xmlns:x="http://www.yworks.com/xml/yfiles-common/markup/2.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:y="http://www.yworks.com/xml/graphml" xmlns:yed="http://www.yworks.com/xml/yed/3" xsi:schemaLocation="http://graphml.graphdrawing.org/xmlns http://www.yworks.com/xml/schema/graphml/1.1/ygraphml.xsd">
+  <!--Created by yEd 3.19-->
+  <key attr.name="Description" attr.type="string" for="graph" id="d0"/>
+  <key for="port" id="d1" yfiles.type="portgraphics"/>
+  <key for="port" id="d2" yfiles.type="portgeometry"/>
+  <key for="port" id="d3" yfiles.type="portuserdata"/>
+  <key attr.name="url" attr.type="string" for="node" id="d4"/>
+  <key attr.name="description" attr.type="string" for="node" id="d5"/>
+  <key for="node" id="d6" yfiles.type="nodegraphics"/>
+  <key for="graphml" id="d7" yfiles.type="resources"/>
+  <key attr.name="url" attr.type="string" for="edge" id="d8"/>
+  <key attr.name="description" attr.type="string" for="edge" id="d9"/>
+  <key for="edge" id="d10" yfiles.type="edgegraphics"/>
+  <graph edgedefault="directed" id="G">
+    <data key="d0"/>
+    <node id="n0">
+      <data key="d6">
+        <y:ShapeNode>
+          <y:Geometry height="30.0" width="157.0" x="264.5" y="304.0"/>
+          <y:Fill color="#BDD7EE" transparent="false"/>
+          <y:BorderStyle color="#9CC3E5" raised="false" type="line" width="1.0"/>
+          <y:NodeLabel alignment="center" autoSizePolicy="content" fontFamily="Dialog" fontSize="12" fontStyle="plain" hasBackgroundColor="false" hasLineColor="false" height="18.701171875" horizontalTextPosition="center" iconTextGap="4" modelName="custom" textColor="#2E75B5" verticalTextPosition="bottom" visible="true" width="123.390625" x="16.8046875" xml:space="preserve" y="5.6494140625">system_configurations<y:LabelModel><y:SmartNodeLabelModel distance="4.0"/></y:LabelModel><y:ModelParameter><y:SmartNodeLabelModelParameter labelRatioX="0.0" labelRatioY="0.0" nodeRatioX="0.0" nodeRatioY="0.0" offsetX="0.0" offsetY="0.0" upX="0.0" upY="-1.0"/></y:ModelParameter></y:NodeLabel>
+          <y:Shape type="rectangle"/>
+        </y:ShapeNode>
+      </data>
+    </node>
+    <node id="n1">
+      <data key="d6">
+        <y:ShapeNode>
+          <y:Geometry height="30.0" width="105.0" x="526.0" y="223.0"/>
+          <y:Fill color="#F7CBAC" transparent="false"/>
+          <y:BorderStyle color="#F4B183" raised="false" type="line" width="1.0"/>
+          <y:NodeLabel alignment="center" autoSizePolicy="content" fontFamily="Dialog" fontSize="12" fontStyle="plain" hasBackgroundColor="false" hasLineColor="false" height="18.701171875" horizontalTextPosition="center" iconTextGap="4" modelName="custom" textColor="#C55A11" verticalTextPosition="bottom" visible="true" width="80.693359375" x="12.1533203125" xml:space="preserve" y="5.6494140625">system ID 111<y:LabelModel><y:SmartNodeLabelModel distance="4.0"/></y:LabelModel><y:ModelParameter><y:SmartNodeLabelModelParameter labelRatioX="0.0" labelRatioY="0.0" nodeRatioX="0.0" nodeRatioY="0.0" offsetX="0.0" offsetY="0.0" upX="0.0" upY="-1.0"/></y:ModelParameter></y:NodeLabel>
+          <y:Shape type="rectangle"/>
+        </y:ShapeNode>
+      </data>
+    </node>
+    <node id="n2">
+      <data key="d6">
+        <y:ShapeNode>
+          <y:Geometry height="30.0" width="105.0" x="526.0" y="304.0"/>
+          <y:Fill color="#F7CBAC" transparent="false"/>
+          <y:BorderStyle color="#F4B183" raised="false" type="line" width="1.0"/>
+          <y:NodeLabel alignment="center" autoSizePolicy="content" fontFamily="Dialog" fontSize="12" fontStyle="plain" hasBackgroundColor="false" hasLineColor="false" height="18.701171875" horizontalTextPosition="center" iconTextGap="4" modelName="custom" textColor="#C55A11" verticalTextPosition="bottom" visible="true" width="80.693359375" x="12.1533203125" xml:space="preserve" y="5.6494140625">system ID 222<y:LabelModel><y:SmartNodeLabelModel distance="4.0"/></y:LabelModel><y:ModelParameter><y:SmartNodeLabelModelParameter labelRatioX="0.0" labelRatioY="0.0" nodeRatioX="0.0" nodeRatioY="0.0" offsetX="0.0" offsetY="0.0" upX="0.0" upY="-1.0"/></y:ModelParameter></y:NodeLabel>
+          <y:Shape type="rectangle"/>
+        </y:ShapeNode>
+      </data>
+    </node>
+    <node id="n3">
+      <data key="d6">
+        <y:ShapeNode>
+          <y:Geometry height="30.0" width="105.0" x="526.0" y="385.0"/>
+          <y:Fill color="#F7CBAC" transparent="false"/>
+          <y:BorderStyle color="#F4B183" raised="false" type="line" width="1.0"/>
+          <y:NodeLabel alignment="center" autoSizePolicy="content" fontFamily="Dialog" fontSize="12" fontStyle="plain" hasBackgroundColor="false" hasLineColor="false" height="18.701171875" horizontalTextPosition="center" iconTextGap="4" modelName="custom" textColor="#C55A11" verticalTextPosition="bottom" visible="true" width="80.693359375" x="12.1533203125" xml:space="preserve" y="5.6494140625">system ID 333<y:LabelModel><y:SmartNodeLabelModel distance="4.0"/></y:LabelModel><y:ModelParameter><y:SmartNodeLabelModelParameter labelRatioX="0.0" labelRatioY="0.0" nodeRatioX="0.0" nodeRatioY="0.0" offsetX="0.0" offsetY="0.0" upX="0.0" upY="-1.0"/></y:ModelParameter></y:NodeLabel>
+          <y:Shape type="rectangle"/>
+        </y:ShapeNode>
+      </data>
+    </node>
+    <node id="n4">
+      <data key="d6">
+        <y:ShapeNode>
+          <y:Geometry height="30.0" width="207.0" x="692.5" y="223.0"/>
+          <y:Fill color="#FEE599" transparent="false"/>
+          <y:BorderStyle color="#FFD965" raised="false" type="line" width="1.0"/>
+          <y:NodeLabel alignment="center" autoSizePolicy="content" fontFamily="Dialog" fontSize="12" fontStyle="plain" hasBackgroundColor="false" hasLineColor="false" height="18.701171875" horizontalTextPosition="center" iconTextGap="4" modelName="custom" textColor="#A37B00" verticalTextPosition="bottom" visible="true" width="179.763671875" x="13.6181640625" xml:space="preserve" y="5.6494140625">map(default_kid -&gt; configuration)<y:LabelModel><y:SmartNodeLabelModel distance="4.0"/></y:LabelModel><y:ModelParameter><y:SmartNodeLabelModelParameter labelRatioX="0.0" labelRatioY="0.0" nodeRatioX="0.0" nodeRatioY="0.0" offsetX="0.0" offsetY="0.0" upX="0.0" upY="-1.0"/></y:ModelParameter></y:NodeLabel>
+          <y:Shape type="rectangle"/>
+        </y:ShapeNode>
+      </data>
+    </node>
+    <node id="n5">
+      <data key="d6">
+        <y:ShapeNode>
+          <y:Geometry height="30.0" width="105.0" x="692.5" y="320.0"/>
+          <y:Fill color="#DFA9FE" transparent="false"/>
+          <y:BorderStyle color="#C765FF" raised="false" type="line" width="1.0"/>
+          <y:NodeLabel alignment="center" autoSizePolicy="content" fontFamily="Dialog" fontSize="12" fontStyle="plain" hasBackgroundColor="false" hasLineColor="false" height="18.701171875" horizontalTextPosition="center" iconTextGap="4" modelName="custom" textColor="#7900BF" verticalTextPosition="bottom" visible="true" width="89.388671875" x="7.8056640625" xml:space="preserve" y="5.6494140625">default_kid AAA<y:LabelModel><y:SmartNodeLabelModel distance="4.0"/></y:LabelModel><y:ModelParameter><y:SmartNodeLabelModelParameter labelRatioX="0.0" labelRatioY="0.0" nodeRatioX="0.0" nodeRatioY="0.0" offsetX="0.0" offsetY="0.0" upX="0.0" upY="-1.0"/></y:ModelParameter></y:NodeLabel>
+          <y:Shape type="rectangle"/>
+        </y:ShapeNode>
+      </data>
+    </node>
+    <node id="n6">
+      <data key="d6">
+        <y:ShapeNode>
+          <y:Geometry height="30.0" width="105.0" x="827.5" y="320.0"/>
+          <y:Fill color="#DFA9FE" transparent="false"/>
+          <y:BorderStyle color="#C765FF" raised="false" type="line" width="1.0"/>
+          <y:NodeLabel alignment="center" autoSizePolicy="content" fontFamily="Dialog" fontSize="12" fontStyle="plain" hasBackgroundColor="false" hasLineColor="false" height="18.701171875" horizontalTextPosition="center" iconTextGap="4" modelName="custom" textColor="#7900BF" verticalTextPosition="bottom" visible="true" width="89.388671875" x="7.8056640625" xml:space="preserve" y="5.6494140625">default_kid BBB<y:LabelModel><y:SmartNodeLabelModel distance="4.0"/></y:LabelModel><y:ModelParameter><y:SmartNodeLabelModelParameter labelRatioX="0.0" labelRatioY="0.0" nodeRatioX="0.0" nodeRatioY="0.0" offsetX="0.0" offsetY="0.0" upX="0.0" upY="-1.0"/></y:ModelParameter></y:NodeLabel>
+          <y:Shape type="rectangle"/>
+        </y:ShapeNode>
+      </data>
+    </node>
+    <node id="n7">
+      <data key="d6">
+        <y:ShapeNode>
+          <y:Geometry height="30.0" width="157.0" x="692.5" y="385.0"/>
+          <y:Fill color="#FFA69E" transparent="false"/>
+          <y:BorderStyle color="#FF6556" raised="false" type="line" width="1.0"/>
+          <y:NodeLabel alignment="center" autoSizePolicy="content" fontFamily="Dialog" fontSize="12" fontStyle="plain" hasBackgroundColor="false" hasLineColor="false" height="18.701171875" horizontalTextPosition="center" iconTextGap="4" modelName="custom" textColor="#AB0E00" verticalTextPosition="bottom" visible="true" width="144.712890625" x="6.1435546875" xml:space="preserve" y="5.6494140625">DRM system configuration<y:LabelModel><y:SmartNodeLabelModel distance="4.0"/></y:LabelModel><y:ModelParameter><y:SmartNodeLabelModelParameter labelRatioX="0.0" labelRatioY="0.0" nodeRatioX="0.0" nodeRatioY="0.0" offsetX="0.0" offsetY="0.0" upX="0.0" upY="-1.0"/></y:ModelParameter></y:NodeLabel>
+          <y:Shape type="rectangle"/>
+        </y:ShapeNode>
+      </data>
+    </node>
+    <edge id="e0" source="n0" target="n1">
+      <data key="d10">
+        <y:PolyLineEdge>
+          <y:Path sx="0.0" sy="0.0" tx="0.0" ty="0.0">
+            <y:Point x="506.0" y="319.0"/>
+            <y:Point x="506.0" y="238.0"/>
+          </y:Path>
+          <y:LineStyle color="#8F8F8F" type="line" width="1.0"/>
+          <y:Arrows source="none" target="standard"/>
+          <y:BendStyle smoothed="false"/>
+        </y:PolyLineEdge>
+      </data>
+    </edge>
+    <edge id="e1" source="n0" target="n2">
+      <data key="d10">
+        <y:PolyLineEdge>
+          <y:Path sx="0.0" sy="0.0" tx="0.0" ty="0.0"/>
+          <y:LineStyle color="#8F8F8F" type="line" width="1.0"/>
+          <y:Arrows source="none" target="standard"/>
+          <y:BendStyle smoothed="false"/>
+        </y:PolyLineEdge>
+      </data>
+    </edge>
+    <edge id="e2" source="n0" target="n3">
+      <data key="d10">
+        <y:PolyLineEdge>
+          <y:Path sx="0.0" sy="0.0" tx="0.0" ty="0.0">
+            <y:Point x="506.0" y="319.0"/>
+            <y:Point x="506.0" y="400.0"/>
+          </y:Path>
+          <y:LineStyle color="#8F8F8F" type="line" width="1.0"/>
+          <y:Arrows source="none" target="standard"/>
+          <y:EdgeLabel alignment="center" configuration="AutoFlippingLabel" distance="2.0" fontFamily="Dialog" fontSize="12" fontStyle="plain" hasBackgroundColor="false" hasLineColor="false" height="18.701171875" horizontalTextPosition="center" iconTextGap="4" modelName="custom" preferredPlacement="anywhere" ratio="0.5" textColor="#000000" verticalTextPosition="bottom" visible="true" width="54.70703125" x="16.084399220394232" xml:space="preserve" y="-21.3505859375">Keyed on<y:LabelModel><y:SmartEdgeLabelModel autoRotationEnabled="false" defaultAngle="0.0" defaultDistance="10.0"/></y:LabelModel><y:ModelParameter><y:SmartEdgeLabelModelParameter angle="6.283185307179586" distance="12.0" distanceToCenter="true" position="left" ratio="0.21256273271814796" segment="0"/></y:ModelParameter><y:PreferredPlacementDescriptor angle="0.0" angleOffsetOnRightSide="0" angleReference="absolute" angleRotationOnRightSide="co" distance="-1.0" frozen="true" placement="anywhere" side="anywhere" sideReference="relative_to_edge_flow"/></y:EdgeLabel>
+          <y:BendStyle smoothed="false"/>
+        </y:PolyLineEdge>
+      </data>
+    </edge>
+    <edge id="e3" source="n1" target="n4">
+      <data key="d10">
+        <y:PolyLineEdge>
+          <y:Path sx="0.0" sy="0.0" tx="0.0" ty="0.0"/>
+          <y:LineStyle color="#8F8F8F" type="line" width="1.0"/>
+          <y:Arrows source="none" target="standard"/>
+          <y:BendStyle smoothed="false"/>
+        </y:PolyLineEdge>
+      </data>
+    </edge>
+    <edge id="e4" source="n4" target="n5">
+      <data key="d10">
+        <y:PolyLineEdge>
+          <y:Path sx="0.0" sy="0.0" tx="0.0" ty="0.0">
+            <y:Point x="796.0" y="300.0"/>
+            <y:Point x="745.0" y="300.0"/>
+          </y:Path>
+          <y:LineStyle color="#8F8F8F" type="line" width="1.0"/>
+          <y:Arrows source="none" target="standard"/>
+          <y:BendStyle smoothed="false"/>
+        </y:PolyLineEdge>
+      </data>
+    </edge>
+    <edge id="e5" source="n4" target="n6">
+      <data key="d10">
+        <y:PolyLineEdge>
+          <y:Path sx="0.0" sy="0.0" tx="0.0" ty="0.0">
+            <y:Point x="796.0" y="300.0"/>
+            <y:Point x="880.0" y="300.0"/>
+          </y:Path>
+          <y:LineStyle color="#8F8F8F" type="line" width="1.0"/>
+          <y:Arrows source="none" target="standard"/>
+          <y:EdgeLabel alignment="center" configuration="AutoFlippingLabel" distance="2.0" fontFamily="Dialog" fontSize="12" fontStyle="plain" hasBackgroundColor="false" hasLineColor="false" height="18.701171875" horizontalTextPosition="center" iconTextGap="4" modelName="custom" preferredPlacement="anywhere" ratio="0.5" textColor="#000000" verticalTextPosition="bottom" visible="true" width="54.70703125" x="-57.353515625" xml:space="preserve" y="21.32470703125">Keyed on<y:LabelModel><y:SmartEdgeLabelModel autoRotationEnabled="false" defaultAngle="0.0" defaultDistance="10.0"/></y:LabelModel><y:ModelParameter><y:SmartEdgeLabelModelParameter angle="0.0" distance="30.0" distanceToCenter="true" position="right" ratio="0.5" segment="0"/></y:ModelParameter><y:PreferredPlacementDescriptor angle="0.0" angleOffsetOnRightSide="0" angleReference="absolute" angleRotationOnRightSide="co" distance="-1.0" frozen="true" placement="anywhere" side="anywhere" sideReference="relative_to_edge_flow"/></y:EdgeLabel>
+          <y:BendStyle smoothed="false"/>
+        </y:PolyLineEdge>
+      </data>
+    </edge>
+    <edge id="e6" source="n5" target="n7">
+      <data key="d10">
+        <y:PolyLineEdge>
+          <y:Path sx="0.0" sy="0.0" tx="-26.0" ty="0.0"/>
+          <y:LineStyle color="#8F8F8F" type="line" width="1.0"/>
+          <y:Arrows source="none" target="standard"/>
+          <y:BendStyle smoothed="false"/>
+        </y:PolyLineEdge>
+      </data>
+    </edge>
+  </graph>
+  <data key="d7">
+    <y:Resources/>
+  </data>
+</graphml>
diff --git a/Images/Security/SelectionAlgorithm-SystemConfigurations.png b/Images/Security/SelectionAlgorithm-SystemConfigurations.png
diff --git a/References.json b/References.json
@@ -45,6 +45,9 @@
     "3GPP26.116": {
         "title": "3GPP TS 26.116 (03/2016): Television (TV) over 3GPP services; Video Profiles."
     },
+    "jws": {
+        "aliasOf": "rfc7515"
+    },
     "ATSC3": {
         "href": "https://https://www.atsc.org/wp-content/uploads/2017/10/A300-2017-ATSC-3-System-Standard-1.pdf",
         "title": "ATSC Standard: A/300:2017 “ATSC3.0 System”",
@@ -53,5 +56,15 @@
     "MPEGDASHCMAFPROFILE": {
         "title": "N18641 WD of ISO/IEC 23009-1 4th edition AMD 1 Client event and timed metadata processing",
         "publisher": "ISO/IEC JTC1/SC29/WG11 MPEG"
+    },
+    "MSPR-EncryptionModes": {
+        "title": "PlayReady Content Encryption Modes",
+        "publisher": "Microsoft",
+        "href": "https://docs.microsoft.com/en-us/playready/packaging/content-encryption-modes"
+    },
+    "HLS-LowLatency": {
+        "title": "Protocol Extension for Low-Latency HLS (Preliminary Specification)",
+        "publisher": "Apple",
+        "href": "https://developer.apple.com/documentation/http_live_streaming/protocol_extension_for_low-latency_hls_preliminary_specification"
     }
 }