1. The following are the basic functions for the purposes of the definition of “Qualified Content” in paragraph 2.3(d) of this Code:
(a)
Electronic programme guide and synopsis;
(b)
Multiple languages (for example, dual-sound option);
(c)
Subtitles;
(d)
Stereo/surround sound formats;
(e)
Navigational access, including Left, Right, Up, Down, OK, Enter, Exit; and
(f)
Time elapsed and time remaining.
PART II
VALUE-ADDED SERVICES
1. The following services are the value-added services for the purposes of the definition of “Qualified Content” in paragraph 2.3(d) of this Code, the incorporation of which in any channel or programming content will not of its own render the channel or programming content Qualified Content:
(a)
Subtitles;
(b)
Dubbing;
(c)
Commentaries, and pre and post-documentaries which are not standalone programmes;
(d)
Enhanced interactive features, including contest and voting services, and enhanced television features such as a button feature which allows consumers to view programmed associated data relating to the content (for example, programme synopsis);
(e)
Promotional trailers, programme advertisements, press conferences, on-screen advertisements and crawler messages produced for and associated with the content;
(f)
Footages and talkshows, including snippets, interviews (for example, with artistes) and previews and reviews produced for and associated with the content;
(g)
Programme highlights, including fillers and programme-related previews and reviews of the content;
(h)
Format upgrades (including upgrades to high definition (HD) format or three-dimensional (3D) format);
(i)
User generated content, including short message services, multi-media message services, emails, video clips, audio clips and discussion forums relating to the content.
PART III
CONTENT PROTECTION SECURITY REQUIREMENTS
1. General Principles
(a)
In accordance with paragraph 2.7.2A(d) of this Code, MDA sets out the following content protection security principles.
(b)
The Receiving Qualified Licensee must provide end-to-end protection of Qualified Content from the point of handover from the Supplying Qualified Licensee to the Subscriber’s premises. In order to do so, the Receiving Qualified Licensee must provide adequate:
(i)
Headend security, to ensure that Qualified Content is adequately protected from physical or digital theft while in its headend;
(ii)
Content Protection Delivery System (“CPDS”) security, to protect Qualified Content while it is transmitted from its own headend to its Subscribers’ premises; and
(iii)
Set-top box security, to protect Qualified Content against unauthorised access once Qualified Content has been decrypted by an authorised set-top box.
2. Security Standards
(a)
Network operator headend security requirements should include the following elements:
(i)
A management control environment that defines security policies, procedures and controls for the secure handling of Qualified Content;
(ii)
Security to prevent the physical theft of Qualified Content while present at the headend; and
(iii)
Security to prevent the digital theft of Qualified Content while present at the headend.
(b)
CPDS security should include the following elements:
(i)
A suitable content encryption algorithm;
(ii)
The ability to revoke unauthorised devices and to renew the security of the CPDS in case of a breach;
(iii)
A process to monitor when a compromise of the CPDS has taken place and ability to re-secure the system in case of compromise; and
(iv)
Security devices to deter piracy.
(c)
Set-top box content protection security should securely manage the output, storage, copying and recording of decrypted Qualified Content received from the CPDS, including the following elements:
(i)
Qualified Content should not be transmitted from the set-top box via analogue or digital means unless in a manner which does not breach the requirements specified by the CPDS;
(ii)
Set-top box receivers should not copy, record, or store decrypted Qualified Content except as permitted under requirements specified by the CPDS; and
(iii)
The set-top box receivers should be robust to effectively frustrate attempts to gain access to decrypted Qualified Content or the keys to gain access to such Qualified Content.
3. Other considerations
(a)
A Receiving Qualified Licensee should ensure its compliance with the principles set forth in this Part and submit a certification, in a form acceptable to MDA, confirming such compliance.