Common use of Hardware Root of Trust Clause in Contracts

Hardware Root of Trust. The Content Protection System (CPS) and/or the Approved Device on which the CPS executes shall use a hardware means ("Hardware Root of Trust") which prevents compromise via software attacks, of the Content Protection System. For example, the Hardware Root of Trust may provide some or all of the following functions: hardware defences against reverse engineering of software hardware assisted software tamper resistance hardware secure key storage (and or key use) hardware assisted verification of software Decryption of (i) content protected by the Content Protection System and (ii) CSPs (as defined in Section 2.1 below) related to the Content Protection System shall take place in an isolated processing environment. Decrypted content must be encrypted during transmission to the graphics card for rendering HD Day & Date Requirements In addition to the foregoing requirements, all HDEarly Window content (720 X 576 resolutionboth SD and above 5Mbps bit rateHD) is subject to the following set of content protection requirements: After December 31, 2011, all Approved Devices shall limit (e.g. down-scale) analog outputs for decrypted protected Included Programs to standard definition at a resolution no greater than 720X480 or 720 X 576. [NTD: With Xxxxxx’ engineering prime’s to comment.] At such time as physical media players manufactured by licensees of the Advanced Access Content System are required to detect audio and/or video watermarks during content playback (the “Watermark Detection Date”), Licensee shall require, within two (2) years of the Watermark Detection Date, that any new devices capable of receiving and decrypting protected high definition content from the Licensed Service that can also receive content from a source other than the Licensed Service shall detect and respond to the embedded state and comply with the corresponding playback control rules. For HD content released prior to the Day and Date release of the DVD and/or BluRay version of the content (“Early Window”), The Content Protection System shall be capable of inserting a Licensor approved forensic watermark into the output video. The watermark must contain the sufficient information such that forensic analysis of unauthorized recorded video clips of the output video shall uniquely determine the user account to which the output video was delivered. Upon discovery by the Licensor or Licensee of unauthorized distribution of the licensed content [e.g. such content is found on a peer-to-peer file sharing network] determined to have been delivered to the Licensee, the Licensee shall detect the forensic watermark and determine the user account to which the video was delivered. Licensee shall have an obligation to monitor for security breaches at all times, including unauthorized distribution by any user of any Early Window content (whether or not such content belongs to Licensor). Licensee shall promptly report the details of any breach to Licensor with respect to Licensor content, and at least the existence of any such breach with respect to third party content. Licensee shall then, at a minimum, terminate the user’s ability to acquire Licensor content from the Licensed Service and – should the breach have occurred with respect to Licensor content – shall either provide information as to the identity of the user to the Licensor or take other action, agreed between Licensee and Licensor, such that there is an agreed and significant deterrent against unauthorized redistribution by that user of Licensor content. Licensee shall also make available to other content providers the existence of any security breach related to Licensor’s content and Licensee shall seek from other content providers the ability to make similar disclosures with respect to their content. Licensee shall also notify the MPAA of any such reportable security breach once a process for MPAA notification is established. If an event occurs that Licensor determines in its own discretion could lead to the unauthorized distribution of licensed content (whether or not such content belongs to Licensor), Licensor shall have immediate suspension and termination rights under this Agreement. [Other remedies for security breaches TBD.]

Hardware Root of Trust. The Content Protection System (CPS) and/or the Approved Device on which the CPS executes shall use a hardware means ("Hardware Root of Trust") which prevents compromise via software attacks, of the Content Protection System. For example, the Hardware Root of Trust may provide some or all of the following functions: hardware defences against reverse engineering of software hardware assisted software tamper resistance hardware secure key storage (and or key use) hardware assisted verification of software Decryption of (i) content protected by the Content Protection System and (ii) CSPs (as defined in Section 2.1 below) related to the Content Protection System shall take place in an isolated processing environment. Decrypted content must be encrypted during transmission to the graphics card for rendering HD Day & Date Early Window content Requirements In addition to the foregoing requirements, all HDEarly Early Window HD content (720 X 576 resolutionboth SD and above 5Mbps bit rateHD) is subject to the following set of content protection requirements: After December 31, 2011, all Approved Devices shall limit (e.g. down-scale) analog outputs for decrypted protected Included Programs to standard definition at a resolution no greater than 720X480 or 720 X 576. [NTD: With Xxxxxx’ engineering prime’s to comment.] At such time as physical media players manufactured by licensees of the Advanced Access Content System are required to detect audio and/or video watermarks during content playback (the “Watermark Detection Date”), Licensee shall require, within two (2) years of the Watermark Detection Date, that any new devices capable of receiving and decrypting protected high definition content from the Licensed Service that can also receive content from a source other than the Licensed Service shall detect and respond to the embedded state and comply with the corresponding playback control rules. For HD content released prior to the Day and Date release of the DVD and/or BluRay version of the content (“Early Window”), The Content Protection System shall be capable of inserting a Licensor approved forensic watermark into the output video. The watermark must contain the sufficient information such that forensic analysis of unauthorized recorded video clips of the output video shall uniquely determine the user account to which the output video was delivered. Upon discovery by Licensee shall provide Licensor with sufficient tools such that Licensor can detect the Licensor or Licensee of unauthorized distribution presence of the licensed content [e.g. such content is found on a peer-to-peer file sharing network] determined to have been delivered to the Licensee, the Licensee shall detect the forensic watermark and determine the user account to which the video was delivered. Licensee shall have an obligation to monitor for security breaches at all times, including unauthorized distribution by any user of any Early Window content (whether or not such content belongs to Licensor). Licensee shall promptly report the details of any breach to Licensor with respect to Licensor content, and at least the existence of any such breach with respect to third party content. Licensee shall then, at a minimum, terminate the user’s ability to acquire Licensor content from the Licensed Service and – should the breach have occurred with respect to Licensor content – shall either provide information as to the identity of the user to the Licensor or take other action, agreed between Licensee and Licensor, such that there is an agreed and significant deterrent against unauthorized redistribution by that user of Licensor content. Licensee shall also make available to other content providers the existence of any security breach related to Licensor’s content and Licensee shall seek from other content providers the ability to make similar disclosures with respect to their content. Licensee shall also notify the MPAA of any such reportable security breach once a process for MPAA notification is established. If an event occurs that Licensor determines in its own discretion could lead to the unauthorized distribution of licensed content (whether or not such content belongs to Licensor), Licensor shall have immediate suspension and termination rights under this Agreement. [Other remedies for security breaches TBDwatermark.]

Hardware Root of Trust. The Content Protection System (CPS) and/or the Approved Device on which the CPS executes shall use a hardware means ("Hardware Root of Trust") which prevents compromise via software attacks, of the Content Protection System. For example, the Hardware Root of Trust may provide some or all of the following functions: hardware defences against reverse engineering of software hardware assisted software tamper resistance hardware secure key storage (and or key use) hardware assisted verification of software Decryption of (i) content protected by the Content Protection System and (ii) CSPs (as defined in Section 2.1 below) related to the Content Protection System shall take place in an isolated processing environment. Decrypted content must be encrypted during transmission to the graphics card for rendering HD Day & Date Requirements Requirements63 In addition to the foregoing requirements, all HDEarly Window HD content (720 X 576 resolutionboth SD and above 5Mbps bit rateHD) is subject to the following set of content protection requirements: After December 31, 2011, all Approved Devices shall limit (e.g. down-scale) analog outputs for decrypted protected Included Programs to standard definition at a resolution no greater than 720X480 or 720 X 576. [NTD: With Xxxxxx’ engineering prime’s to comment.] At such time as physical media players manufactured by licensees of the Advanced Access Content System are required to detect audio and/or video watermarks during content playback (the “Watermark Detection Date”), Licensee shall require, within two (2) years of the Watermark Detection Date, that any new devices capable of receiving and decrypting protected high definition content from the Licensed Service that can also receive content from a source other than the Licensed Service shall detect and respond to the embedded state and comply with the corresponding playback control rules. For HD content released prior to the Day and Date release Without limiting any other provision of the DVD and/or BluRay version of the content (“Early Window”), The Content Protection System shall be capable of inserting a Licensor approved forensic watermark into the output video. The watermark must contain the sufficient information such that forensic analysis of unauthorized recorded video clips of the output video shall uniquely determine the user account to which the output video was delivered. Upon discovery by the Licensor or Licensee of unauthorized distribution of the licensed content [e.g. such content is found on a peer-to-peer file sharing network] determined to have been delivered to the LicenseeAgreement, the Licensee shall detect the forensic watermark parties acknowledge and determine the user account agree that it is in their mutual interest to which the video was delivered. Licensee shall have an obligation take affirmative measures to monitor for security breaches at all times, including unauthorized distribution by any user of any Early Window content (whether or not such content belongs to Licensor). Licensee shall promptly report the details of any breach to Licensor with respect to Licensor content, and at least the existence of any such breach with respect to third party content. Licensee shall then, at a minimum, terminate the user’s ability to acquire Licensor content from the Licensed Service and – should the breach have occurred with respect to Licensor content – shall either provide information as to the identity of the user to the Licensor or take other action, agreed between Licensee and Licensor, such that there is an agreed and significant deterrent against unauthorized redistribution by that user of Licensor content. Licensee shall also make available to other content providers the existence of any security breach related to Licensor’s content and Licensee shall seek from other content providers the ability to make similar disclosures with respect to their content. Licensee shall also notify the MPAA of any such reportable security breach once a process for MPAA notification is established. If an event occurs that Licensor determines in its own discretion could lead to combat the unauthorized distribution of licensed content (whether or not copyrighted content, and Licensee accordingly agrees to the following in connection with such content belongs to Licensor), Licensor shall have immediate suspension and termination rights under this Agreement. [Other remedies for security breaches TBD.]anti-piracy efforts:

Hardware Root of Trust. The Content Protection System (CPS) and/or the Approved Device on which the CPS executes shall use a hardware means ("Hardware Root of Trust") which prevents compromise via software attacks, of the Content Protection System. For example, the Hardware Root of Trust may provide some or all of the following functions: hardware defences against reverse engineering of software hardware assisted software tamper resistance hardware secure key storage (and or key use) hardware assisted verification of software Decryption of (i) content protected by the Content Protection System and (ii) CSPs (as defined in Section 2.1 below) related to the Content Protection System shall take place in an isolated processing environment. Decrypted content must be encrypted during transmission to the graphics card for rendering HD Day & Date Requirements In addition to the foregoing requirements, all HDEarly Window HD content (720 X 576 resolutionboth SD and above 5Mbps bit rateHD) is subject to the following set of content protection requirements: After December 31, 2011, all Approved Devices shall limit (e.g. down-scale) analog outputs for decrypted protected Included Programs to standard definition at a resolution no greater than 720X480 or 720 X 576. [NTD: With Xxxxxx’ engineering prime’s to comment.] At such time as physical media players manufactured by licensees of the Advanced Access Content System are required to detect audio and/or video watermarks during content playback (the “Watermark Detection Date”), Licensee shall require, within two (2) years of the Watermark Detection Date, that any new devices capable of receiving and decrypting protected high definition content from the Licensed Service that can also receive content from a source other than the Licensed Service shall detect and respond to the embedded state and comply with the corresponding playback control rules. For HD content released prior to the Day and Date release Without limiting any other provision of the DVD and/or BluRay version of the content (“Early Window”), The Content Protection System shall be capable of inserting a Licensor approved forensic watermark into the output video. The watermark must contain the sufficient information such that forensic analysis of unauthorized recorded video clips of the output video shall uniquely determine the user account to which the output video was delivered. Upon discovery by the Licensor or Licensee of unauthorized distribution of the licensed content [e.g. such content is found on a peer-to-peer file sharing network] determined to have been delivered to the LicenseeAgreement, the Licensee shall detect the forensic watermark parties acknowledge and determine the user account agree that it is in their mutual interest to which the video was delivered. Licensee shall have an obligation take affirmative measures to monitor for security breaches at all times, including unauthorized distribution by any user of any Early Window content (whether or not such content belongs to Licensor). Licensee shall promptly report the details of any breach to Licensor with respect to Licensor content, and at least the existence of any such breach with respect to third party content. Licensee shall then, at a minimum, terminate the user’s ability to acquire Licensor content from the Licensed Service and – should the breach have occurred with respect to Licensor content – shall either provide information as to the identity of the user to the Licensor or take other action, agreed between Licensee and Licensor, such that there is an agreed and significant deterrent against unauthorized redistribution by that user of Licensor content. Licensee shall also make available to other content providers the existence of any security breach related to Licensor’s content and Licensee shall seek from other content providers the ability to make similar disclosures with respect to their content. Licensee shall also notify the MPAA of any such reportable security breach once a process for MPAA notification is established. If an event occurs that Licensor determines in its own discretion could lead to combat the unauthorized distribution of licensed content (whether or not copyrighted content, and Licensee accordingly agrees to the following in connection with such content belongs to Licensor), Licensor shall have immediate suspension and termination rights under this Agreement. [Other remedies for security breaches TBD.]anti-piracy efforts: