AS/NZS ISO/IEC 23078.2:2025
Information technology – Specification of digital rights management (DRM) technology for digital publications – Part 2: User key-based protection
The objective of this document is to define a technical solution for encrypting resources in digital publications (especially EPUB) and for securely delivering decryption keys to reading systems, included in licenses tailored to specific users. It also defines a simple passphrase-based authentication method for reading systems to verify the license and access the encrypted resources of such digital publications.
This document is identical with, and has been reproduced from, ISO/IEC 23078‑2:2024 Information technology – Specification of digital rights management (DRM) technology for digital publications – Part 2: User key-based protection.
| Get this standard | Prices exclude GST | |
|---|---|---|
| PDF ( Single user document) |
$163.80 NZD
|
|
| HardCopy |
$182.00 NZD
|
|
| Networkable PDF |
Price varies
|
|
| Online Library ( Annual subscription) |
Info
Price varies
Online Library subscription information Online library subscriptions provide a cost-effective solution for organisations of any size to access the latest standards, offering 24/7 access to a personalised catalogue. The service ensures subscribers have have the most up-to-date version of selected standards, incluing automatic updates for any amendments or versions. Pricing is dependent on the chosen standards and the number of concurrent users, with discounts applied from the standards PDF price. For customised subscriptions or further inquiries, contact the Online Library team. |
AS/NZS ISO/IEC 23078.2:2025 Information technology - Specification of digital rights management (DRM) technology for digital publications User key-based protection
Preface
Foreword
Introduction
1 Scope
2 Normative references
3 Terms and definitions
4 Abbreviated terms
5 Overview
5.1 General
5.2 Protecting the publication
5.3 Licensing the publication
5.4 Reading the publication
6 License document
6.1 General
6.2 Content conformance
6.3 License information
6.3.1 General
6.3.2 Encryption (transmitting keys)
6.3.3 Links (pointing to external resources)
6.3.4 Rights (identifying rights and restrictions)
6.3.5 User (identifying the user)
6.3.6 Signature (signing the license)
6.4 User key
6.4.1 General
6.4.2 Calculating the user key
6.4.3 Hints
6.4.4 Requirements for the user key and user passphrase
6.5 Signature and public key infrastructure
6.5.1 General
6.5.2 Certificates
6.5.3 Canonical form of the license document
6.5.4 Generating the signature
6.5.5 Validating the certificate and signature
7 License status document
7.1 General
7.2 Content conformance
7.3 License status information
7.3.1 General
7.3.2 Status
7.3.3 Updated (timestamps)
7.3.4 Links
7.3.5 Potential rights
7.3.6 Events
7.4 Interactions
7.4.1 General
7.4.2 Handling errors
7.4.3 Checking the status of a license
7.4.4 Registering a device
7.4.5 Returning a publication
7.4.6 Renewing a license
8 Encryption profile
8.1 General
8.2 Encryption profile requirements
8.3 Basic encryption profile 1.0
9 Integration in EPUB
9.1 General
9.2 Encrypted resources
9.3 Using META-INF/encryption.xml for LCP
10 Reading system behaviour
10.1 Detecting LCP protected publication
10.2 License document processing
10.2.1 Overall
10.2.2 Validating the license document
10.2.3 Acquiring the publication
10.2.4 License status processing
10.3 User key processing
10.4 Signature processing
10.5 Publication processing
Annex A (informative) Examples
Annex B (informative) Use case scenarios for library lending model
Annex C (informative) An extension of the LCP specification for PDF
Bibliography
Keep me up-to-date
Sign up to receive updates when there are changes to this standard
Related Information
Similar Standards
-
23/30382233DC
BS EN 9300-00. Aerospace series. LOTAR -LOng Term Archiving and Retrieval of digital technical product documentation such as 3D, CAD and PDM data, Part 007. Terms and references
-
AS/NZS 23950:1999
Information and documentation - Information retrieval (Z30.50) - Application service definition and protocol specification
-
AS/NZS 3968.0:1994
Information technology - Database languages - SQL - Definition of data structures and basic operations
-
AS/NZS 3968.0:1994 A1
Information technology - Database languages - SQL - Definition of data structures and basic operations: Amendment 1
AS/NZS ISO/IEC 23078.2:2025 Information technology - Specification of digital rights management (DRM) technology for digital publications User key-based protection
Preface
Foreword
Introduction
1 Scope
2 Normative references
3 Terms and definitions
4 Abbreviated terms
5 Overview
5.1 General
5.2 Protecting the publication
5.3 Licensing the publication
5.4 Reading the publication
6 License document
6.1 General
6.2 Content conformance
6.3 License information
6.3.1 General
6.3.2 Encryption (transmitting keys)
6.3.3 Links (pointing to external resources)
6.3.4 Rights (identifying rights and restrictions)
6.3.5 User (identifying the user)
6.3.6 Signature (signing the license)
6.4 User key
6.4.1 General
6.4.2 Calculating the user key
6.4.3 Hints
6.4.4 Requirements for the user key and user passphrase
6.5 Signature and public key infrastructure
6.5.1 General
6.5.2 Certificates
6.5.3 Canonical form of the license document
6.5.4 Generating the signature
6.5.5 Validating the certificate and signature
7 License status document
7.1 General
7.2 Content conformance
7.3 License status information
7.3.1 General
7.3.2 Status
7.3.3 Updated (timestamps)
7.3.4 Links
7.3.5 Potential rights
7.3.6 Events
7.4 Interactions
7.4.1 General
7.4.2 Handling errors
7.4.3 Checking the status of a license
7.4.4 Registering a device
7.4.5 Returning a publication
7.4.6 Renewing a license
8 Encryption profile
8.1 General
8.2 Encryption profile requirements
8.3 Basic encryption profile 1.0
9 Integration in EPUB
9.1 General
9.2 Encrypted resources
9.3 Using META-INF/encryption.xml for LCP
10 Reading system behaviour
10.1 Detecting LCP protected publication
10.2 License document processing
10.2.1 Overall
10.2.2 Validating the license document
10.2.3 Acquiring the publication
10.2.4 License status processing
10.3 User key processing
10.4 Signature processing
10.5 Publication processing
Annex A (informative) Examples
Annex B (informative) Use case scenarios for library lending model
Annex C (informative) An extension of the LCP specification for PDF
Bibliography
AS/NZS ISO/IEC 23078.2:2025
Online Library subscription information
Online library subscriptions provide a cost-effective solution for organisations of any size to access the latest standards, offering 24/7 access to a personalised catalogue. The service ensures subscribers have have the most up-to-date version of selected standards, incluing automatic updates for any amendments or versions. Pricing is dependent on the chosen standards and the number of concurrent users, with discounts applied from the standards PDF price. For customised subscriptions or further inquiries, contact the Online Library team.