Common use of Content Protection System Clause in Contracts

Content Protection System. Unless the service is Free to Air, all content delivered to, output from or stored on a device must be protected by a content protection system that includes encryption (or other effective method of ensuring that transmissions cannot be received by unauthorized entities) and digital output protection (such system, the “Content Protection System”). The Content Protection System: is considered approved without written Licensor approval if it is an implementation of one the content protection systems approved by the Digital Entertainment Content Ecosystem (DECE) for UltraViolet services, and said implementation meets the compliance and robustness rules associated with the chosen UltraViolet content protection system. The DECE-approved content protection systems are: ▇▇▇▇▇▇ Broadband Microsoft Playready CMLA Open Mobile Alliance (OMA) DRM Version 2 or 2.1 Adobe Flash Access 2.0 (not Adobe’s Flash streaming product) Widevine Cypher ® is considered approved without written Licensor approval if it is an implementation of a proprietary conditional access system which is widely used and accepted within the industry if not approved under clause 2.1 or clause 2.2 above, shall be approved in writing by Licensor, shall be fully compliant with all the compliance and robustness rules stipulated by the provider of the Content Protection System Geofiltering The Licensee shall take affirmative, reasonable measures to restrict access to Licensor’s content to within the territory in which the content has been licensed. Licensee shall periodically review the geofiltering tactics and perform upgrades to the Content Protection System to maintain industry-standard geofiltering capabilities. For systems which are not based on a unicast transmission to a client over IP-based systems, (e.g systems using satellite broadcast), geofiltering may be accomplished by any means that meets the requirements in this section, and the use of mechanisms based on any IP address assigned to a receiving end user device is NOT required. Network Service Protection Requirements. All licensed content must be protected according to industry standards at content processing and storage facilities. Access to content in unprotected format must be limited to authorized personnel and auditable records of actual access shall be maintained. All facilities which process and store content must be available for Licensor audits, which may be carried out by a third party to be selected by Licensor, upon the request of Licensor. Content must be returned to Licensor or securely destroyed pursuant to the Agreement at the end of such content’s license period including, without limitation, all electronic and physical copies thereof. Free To Air

Content Protection System. Unless the service is Free to Air, all All content delivered to, output from or stored on a device must be protected by a content protection system that includes a digital rights management or conditional access system, encryption (or other effective method of ensuring that transmissions cannot be received by unauthorized entities) and digital output protection (such system, the “Content Protection System”). The Content Protection System shall: be approved in writing by Licensor (including any significant upgrades or new versions, which Licensee shall submit to Licensor for approval upon such upgrades or new versions becoming available, or any upgrades or new versions which decrease the level of security of the Content Protection System: is considered approved without written Licensor approval if it is ), and be fully compliant with all the compliance and robustness rules associated therewith, and use rights settings that are in accordance with the requirements in the Usage Rules, this Content Protection Schedule and this Agreement, and be an implementation of one the content protection systems approved for UltraViolet services by the Digital Entertainment Content Ecosystem (DECE) for UltraViolet services), and said implementation meets the compliance and robustness rules associated with the chosen UltraViolet approved content protection system, or be an implementation of Microsoft WMDRM10 and said implementation meets the associated compliance and robustness rules, or if a conditional access system, be a compliant implementation of a Licensor-approved, industry standard conditional access system, or be a compliant implementation of other Content Protection System approved in writing by Licensor. The DECE-UltraViolet approved content protection systems are: ▇▇▇▇▇▇ Broadband Microsoft Playready CMLA Open Mobile Alliance (OMA) DRM Version 2 or 2.1 Adobe Flash Access 2.0 (not Adobe’s Flash streaming product) Widevine Cypher ® If Licensee supports or facilitates any content sharing or upload service for its Users, the Licensed Service shall use appropriate technology (e.g. digital fingerprint and filtering techniques) to prevent the unauthorized delivery and distribution of Licensor’s content across such content sharing or upload services. YouView (UK only) Licensor content streamed to YouView clients shall: be protected using “Device authentication and encrypted content delivery” using ▇▇▇▇▇▇ Simple Secure Streaming (MS3) as specified in section 3.5 of the YouView Core Technical Specifications or be protected using ▇▇▇▇▇▇ Broadband as specified in “Device authentication and encrypted content delivery”, as specified in section 3.6 of the YouView Core Technical Specifications. NOT be streamed by any other YouView method. Download of Licensor content to YouView clients shall use ▇▇▇▇▇▇ Broadband as specified in “Device authentication and encrypted content delivery” as specified in section 3.6 of the YouView Core Technical Specifications only. Download of Sony Pictures Entertainment content over any other YouView method is considered approved without written Licensor approval if not permitted. In all cases, outputs shall be as protected as specified in section 3.9 of the YouView Core Technical Specifications CI Plus Any Conditional Access implemented via the CI Plus standard used to protect Licensed Content must support the following: Have signed the CI Plus Content Distributor Agreement (CDA), or commit in good faith to sign it as soon as reasonably possible after the Effective Date, so that Licensee can request and receive Service Operator Certificate Revocation Lists (SOCRLs). The Content Distributor Agreement is an implementation available at ▇▇▇▇://▇▇▇.▇▇▇▇▇▇▇▇▇▇▇.▇▇/en/solutions/consumer_electronics.htm . ensure that their CI Plus Conditional Access Modules (CICAMs) support the processing and execution of a proprietary conditional access system SOCRLs, liaising with their CICAM supplier where necessary ensure that their SOCRL contains the most up-to-date CRL available from CI Plus LLP. Not put any entries in the Service Operator Certificate White List (SOCWL, which is widely used and accepted within to undo device revocations in the industry if not approved under clause 2.1 or clause 2.2 above, shall be SOCRL) unless such entries have been approved in writing by Licensor, shall be fully compliant with all the compliance and robustness rules stipulated by the provider of the Content Protection System Geofiltering The Licensee shall take affirmative, reasonable measures . Set CI Plus parameters so as to restrict access to Licensor’s content to within the territory in which the content has been licensed. Licensee shall periodically review the geofiltering tactics and perform upgrades to the Content Protection System to maintain industry-standard geofiltering capabilities. For systems which are not based on a unicast transmission to a client over IP-based systems, (e.g systems using satellite broadcast), geofiltering may be accomplished by any means that meets meet the requirements in the section “Outputs” of this section, and the use of mechanisms based on any IP address assigned to a receiving end user device is NOT required. Network Service Protection Requirements. All licensed content must be protected according to industry standards at content processing and storage facilities. Access to content in unprotected format must be limited to authorized personnel and auditable records of actual access shall be maintained. All facilities which process and store content must be available for Licensor audits, which may be carried out by a third party to be selected by Licensor, upon the request of Licensor. Content must be returned to Licensor or securely destroyed pursuant to the Agreement at the end of such content’s license period including, without limitation, all electronic and physical copies thereof. Free To Airschedule: Streaming

Content Protection System. Unless the service is Free to Air, all All content delivered to, output from or stored on a device must be protected by a content protection system that includes a digital rights management or conditional access system, encryption (or other effective method of ensuring that transmissions cannot be received by unauthorized entities) and digital output protection (such system, the “Content Protection System”). The Content Protection System shall: be approved in writing by Licensor (including any significant upgrades or new versions, which Licensee shall submit to Licensor for approval upon such upgrades or new versions becoming available, or any upgrades or new versions which decrease the level of security of the Content Protection System: is considered approved without written Licensor approval if it is ), and be fully compliant with all the compliance and robustness rules associated therewith, and use rights settings that are in accordance with the requirements in the Usage Rules, this Content Protection Schedule and this Agreement, and be an implementation of one the content protection systems approved for UltraViolet services by the Digital Entertainment Content Ecosystem (DECE) for UltraViolet services), and said implementation meets the compliance and robustness rules associated with the chosen UltraViolet approved content protection system, or be an implementation of Microsoft WMDRM10 and said implementation meets the associated compliance and robustness rules, or if a conditional access system, be a compliant implementation of a Licensor-approved, industry standard conditional access system, or be a compliant implementation of other Content Protection System approved in writing by Licensor. The DECE-UltraViolet approved content protection systems are: ▇▇▇▇▇▇ Broadband Microsoft Playready CMLA Open Mobile Alliance (OMA) DRM Version 2 or 2.1 Adobe Flash Access 2.0 (not Adobe’s Flash streaming product) Widevine Cypher ® If Licensee supports or facilitates any content sharing or upload service for its Users, the Licensed Service shall use appropriate technology (e.g. digital fingerprint and filtering techniques) to prevent the unauthorized delivery and distribution of Licensor’s content across such content sharing or upload services. CI Plus Any Conditional Access implemented via the CI Plus standard used to protect Licensed Content must support the following: Have signed the CI Plus Content Distributor Agreement (CDA), or commit in good faith to sign it as soon as reasonably possible after the Effective Date, so that Licensee can request and receive Service Operator Certificate Revocation Lists (SOCRLs). The Content Distributor Agreement is considered approved without written Licensor approval if it is an implementation available at ▇▇▇▇://▇▇▇.▇▇▇▇▇▇▇▇▇▇▇.▇▇/en/solutions/consumer_electronics.htm . ensure that their CI Plus Conditional Access Modules (CICAMs) support the processing and execution of a proprietary conditional access system SOCRLs, liaising with their CICAM supplier where necessary ensure that their SOCRL contains the most up-to-date CRL available from CI Plus LLP. Not put any entries in the Service Operator Certificate White List (SOCWL, which is widely used and accepted within to undo device revocations in the industry if not approved under clause 2.1 or clause 2.2 above, shall be SOCRL) unless such entries have been approved in writing by Licensor, shall be fully compliant with all the compliance and robustness rules stipulated by the provider of the Content Protection System Geofiltering The Licensee shall take affirmative, reasonable measures . Set CI Plus parameters so as to restrict access to Licensor’s content to within the territory in which the content has been licensed. Licensee shall periodically review the geofiltering tactics and perform upgrades to the Content Protection System to maintain industry-standard geofiltering capabilities. For systems which are not based on a unicast transmission to a client over IP-based systems, (e.g systems using satellite broadcast), geofiltering may be accomplished by any means that meets meet the requirements in the section “Outputs” of this section, and the use of mechanisms based on any IP address assigned to a receiving end user device is NOT required. Network Service Protection Requirements. All licensed content must be protected according to industry standards at content processing and storage facilities. Access to content in unprotected format must be limited to authorized personnel and auditable records of actual access shall be maintained. All facilities which process and store content must be available for Licensor audits, which may be carried out by a third party to be selected by Licensor, upon the request of Licensor. Content must be returned to Licensor or securely destroyed pursuant to the Agreement at the end of such content’s license period including, without limitation, all electronic and physical copies thereof. Free To Airschedule: Streaming