 So we're here on the Demo Friday here. So who are you? I'm Pete Griffin, I work in the Lenaro home group at Lenaro. Today we're demoing some Opti DRM integrations with Play Ready and Tanuki. And what is it working on? The Haiky? So this is the TI X15 high spirited board. This is Play Ready encrypted tree. It's quite a nice little board. We also have it running on Haiky, the popular TV reference platform that is a work in progress at the moment. We've got this nice case here from Daniel Thompson who I think you interviewed the other day. He does call cases? He does. He's got a laser engraver so you can see the LHG logo and nice 96 boards. He probably runs it from the ARM developer box? Probably does. And we've been working a lot with NXP on the IMAX 8M new SoC for SecureDates path. This is Cyril who's been working on it and I'll let him explain more. So what we did is we have built SecureDates path using the hardware IP provided by the IMAX 8M SoC. It's a new SoC for IPTV, voice assistant or sound bar. It's running right here? Yes, it is running here. So you can connect up to three HDMI outputs. You can connect one camera. You have HDMI output, it's 4K, Dolby Vision, HDR10. It will support soon Dolby Atmos. So we have currently integrated Android 8.1 with full travel enabled. And I will explain to you the security IP we added. The main one is RDC, it's a resource domain controller. So it sounds like it's a lot of things happening at the same time, right? Yes. This board is new. Yes, it's very new. IMAX 8M has just been available now. Yes, the GA for Android will happen in two or three weeks. On the Linux one will happen end of June. So what does that mean? Does that mean people that make, let's say, set up boxes with this platform, they will have opti, they will have open source security, DRM, they will have the best latest Android? Yes, except for Play Ready and the Y1, for which they will have to sign something with Microsoft or Google. But for Clerkey, they will be able to use Clerkey and to have secure data pass for Clerkey. Play Ready and Y1 is fully supported in opti. Yes. It's just a question of getting the authorization. Yes, yes, yes. And what else will you talk about here? What do you have on this wall? He explained how using the hardware IP, the secure hardware IP inside the IMAX 8M, we have good secure video pass. We have used RDC, resource domain controller, and the resource domain controller allow to isolate all the different hardware IP inside the chip. So we have almost 100 IP we can isolate. So we can have up to four domains. So to implement a secure video pass, it is a sub-sale pool of secure data pass. We have created four domains. We have CPU in domain 0, CAM in the MN1, CAM is a cryptographic acceleration module. We put the VPU in domain 2, and the DCSS. DCSS is a display controller sub-system. It's our hardware composer. It allows to output the HDMI or to manage the TCP. So for each domain using the RDC, we can create memory regions and we can have up to 52 regions. And some regions, for example the decrypted one, can have different read and write permission depending on which domain we are trying to access it. So as I explained, we put CAM in domain 1, and so that means that CAM is only allowed to write in this buffer. VPU is only allowed to read from here and to write there. And so if for any reason, you hack Android, Linux, or the T, and you ask Android to change this buffer or this one, the RDC will lock the access to access so it's fully secure. Because when you try to write outside of this buffer, you try to write outside of this one, mostly it will happen. If you try to read outside this buffer with the VPU, nothing will happen. RDC will turn zero. So it's fully secure. If you try to dump the memory, you will have a black frame instead of the video. So is this a specific security that's on the IMX8M? Yes. Or is it software? No, it's hardware. Software and security? Yes, it's hardware and security. World. World system? Yes. It's completely isolated at the bus level. Nobody else have this? I think so, yes. So with the Linaro, you are getting all the open source to support this file? Yes. In fact, we took the opti from Linaro. We took the ion buffer management integrated into the player ID on white one, Android plugging from Linaro. Then we have patch openmax and our VPU driver to support ion buffer. And then we use RDC plus truss zone AC to protect the ion buffer. So it's secure at truss zone level and it is secure at RDC level. So how is it, this Linaro connect? What kind of work have you been doing in the past few months? How did you work together as a team, in LHD to get all this done? Well, Alex is the NXPS signee who we've been working with a lot. Also working with Cyril. We've taken the LHD TAs like white one and clear key player ready and it's great to get on this SSC. Those specific security models that are in the IMAX 8M like working within the Linaro community to get perfect support on there? Is that part of what you're doing? Yes. It's been a good collaboration and we're really pleased to see it working. So is this... This is not seen before in all the set-up box TV, smart TV, all this. There's not this kind of hardware security. I don't think so. I think at microcontroller level it is probably the first secure video pass at this level of security. So there's a quad core ARM Cortex-A53 and there's a Cortex-M4 doing the hardware security. No, in fact the Cortex-M4 is managing the low power mode. So for instance, if you have a voice assistant the M4 will be able to detect Alexa and then it will wake up the A53 to manage the high power part of the voice assistant. So which part of the hardware does the security? In fact, it's a dedicated hardware so for the security it can be managed by the A53 or by the M4. So it's another part? Yes. It's not a DSP, it's not something... No, it's an IP block that has a 3-zone ISC and then we configure the RDC controller in the ATF and then we lock the register till the next reboot. So only ATF is able to manage the RDC rules. And this is mostly for the home group? Yes. But IMX8M is going to come from many different markets, right? It's like for IoT also or... It's maybe a little big for IoT. It's mainly for voice assistant, soundbar, IPTV set-top box, HDMI sticks, it's kind of an application. For automotive it will be another... And it's compact, it's also affordable solution maybe? Yes. So it's released now? It's going to be a mess? Yes, it's already... We already shipped some devices to customers. Open boards. Yes. All right. Cool, that's awesome. All right. Thank you. Let me check around over here. Thanks. Hey, what's up? So who are you? What are you working on? I am Sima Subramanian. He's Murthy, my colleague. Hello. And we are Comcast S&Es for LG. And what is the demo that you have here? So we are demonstrating clear key encrypted content playback on WP browser with Opti. So this uses LENARO CDM, CDMI. So we have added WP browser support to the LENARO CDM. And we are demonstrating clear key DRM playback on WP browser. So it's running on a high key? Yes. RDK? Yes, it's on a high key board. And we have already ported RDK media client image on to high key. And on top of that, we are demonstrating this secure content, clear key encrypted content playback. RDK is a very big platform for the Comcast using all their setup boxes. Yeah, RDK is being widely used in the US and it's being developing across Europe also recently. It's optimized for the TV setup box market. Yes. It's an open source media stack. So it's developed by Comcast. So... All right. And this demo shows? Yeah. So now I'm running that YouTube EMI application on the WP browser. And I can demonstrate the clear key video playback. So this is browser window and this is the prints from the trusted application. So the description happens in the secure world. All right. On the hardware security? Yes. All right. Cool. So it's working? Yes. Yeah, it's working. You can see the test cases. So what's next? What are you going to work on before next connect? So next plan will be on full secure data path. Currently this doesn't have hardware acceleration. It doesn't have hardware acceleration and the secure data path. So next plan will be a board with hardware acceleration as well as full secure data path. So maybe a popular board or IMX board. Cool. All right. Awesome. Thank you. Let's check over there the last demo in the corner. What do you have over here? This is a high key... This is your demo? Oh, yes. They have to show the key previewed on the high key board. So it's showing what? DVB? Oh, not DVB. DVB. We can ask Barrow to... Yeah, he's doing that one. Yeah. But you are doing... What is the review? This is a high key... 96 board. And I'm running the... This version gives the OSP high key preview built. Yeah. We run it on a high key board and we want to show it here. It's to say that we are working on it to make it work smoothly with the Lava on the CI. So other... Inquirement... Ecosystem. Yeah. But that...