Close window

Search this report:

Previous 1 | 2 | 3 | 4 | 5 | 6 Next

Technology landscape

Security, authentication and Digital Rights Management (DRM)

Moving that intellectual property around in virtual forms and formats is creating enormous challenges for authors, publishers and information providers. We don’t have to look any farther than the music industry to see the dramatic changes that new access models can have on distribution of intellectual property. Sales of music via online music sites are expected to account for $1.4 billion or 11 percent of music industry sales within the next three years. By 2008, 33 percent of music industry sales will come from downloads.21

“The traditional book as a thematic collection is changing. Books are being decomposed to their fundamental constituent elements.”

—Director, Museum Library

Three primary technology issues surfaced in our review: security, authentication and digital rights management technologies. The more we researched these topics, the more it became clear that these are not three distinct issues, but are increasingly becoming part of one highly interrelated discussion. Due to the complexity of the issues and the brevity required in this scan, our discussion concentrates on providing an overview of what we will define as the “secure rights management” landscape. How each individual component of secure rights management, security, authentication and Digital Rights Management (DRM) will develop independently is still very unclear. There are hundreds of players, fragmented vertical markets and fuzzy standards. What is clear is that all key players in the information supply chain—content owners, software developers, hardware vendors, wireless and network providers—and the e-commerce infrastructure and payments companies are making substantial investments in both the technology and standards of secure rights management.

“Digital Rights Management is a nightmare—too confusing.”

—Corporate Librarian

At the heart of the digital rights discussion is the desire for owners of content (intellectual property) and users of content to have a reliable mechanism(s) to create, distribute and redistribute intellectual property to any authorized user, anytime, anywhere and on any device and, after distribution, to ensure that content is used as authorized over time.

Although the user requirements and the supplier requirements are not at odds, the current business models and technologies infrastructures available to deliver these needs are incompatible. The struggle to develop new models has created significant confusion and disruption for all parties in the information supply chain—which should perhaps be renamed the information supply grid to reflect the interconnected and nonlinear process publishing has become.

“One of the greatest impediments to realizing the potential of universal access to digital collections, [is] our current system of protecting intellectual property rights. The system works reasonably well—albeit not perfectly—in the traditional analog environment. Transferring the concepts of copyright to the digital arena, however, raises numerous thorny problems.”22

The notions of what constitutes an author, a publication, a text, for example, do not transfer well from a print world to a digital one. “When theorists talk about the power of the new media to make everyone an author…or to provide everyone with universal access to potential audiences of millions of readers, they invoke a notion of authorship and a model of access that are more appropriate to traditional print media than to electronic communication. What is an author, after all, if the new media no longer support the legal status or institutional privileges that have traditionally defined that role?”23

Two models help to visualize the complexity, and most importantly, the tight integration of the many elements of a secure rights management environment.

DRM architecture

DRM Functional Architecture diagram24

As the diagram illustrates, the DRM architecture requires a framework that can manage content creation, management and usage. The DRM architecture must ensure security and authentication at each step of the information supply chain.

“Where is scholarly publishing going? Each player says ‘I want to have control over copyright’ but others will want control, too.”

—Director, Academic Library

A second model, developed by Dr. Mark Stefik, Manager of the Information Sciences and Technologies Laboratory at Palo Alto Research Center (PARC) has been included below to help illustrate the concepts of granting digital rights over the life of an asset.25

An effective DRM architecture will not only require secure rights management at the initial content use, but must remain persistent with the content as it is edited or embedded, in the future. Since next-generation applications will reach much deeper into day-to-day activities of consumers, businesses and governments, they will require built-in safeguards far beyond passwords and physical security. That security must “travel” with the asset as it is consumed, reused and repurposed. That security must also support both the user and the owner.

DRM diagram

 

Owner-centric User-flexible26

Digital Dog Kennel or Leash (maintain control at all times and all costs)

Digital Dog Chip (digital object identifier links to a database)

Digital Dog Tag (metadata and watermarks) but sometimes it also involves Kennel (firewalls, encryption) or a Leash (temporary unlocking key) Free range


The revenue is made at time of each license Flexible revenue timing—pay for usage, pay for time, some usage is free
Financial risk/reward balance is locked at this time Risk/reward balance can adapt to fit circumstances

Fixed usages as specified by owner Flexible, permissible usage travel with objects either directly or via link back to a database (equivalent to a dog’s microchip)

Fixed consumer-oriented licenses Standard “Nano contracts”

Owner-centric User-flexible

More and more, there is a move from technologies that provide “copyright protection” (owner-centric) to technology frameworks that enable “rights management” (user-flexible). As outlined in the “Digital Dog” chart above, rights management technologies must meld with other trends. Technology analysts are not sure how this melding of technology and user adoption will occur. Many predict that the technical DRM solutions will not mature as separate solutions, but rather will become embedded features within larger enterprise applications and hardware solutions. Intel, Microsoft, Sun and others have plans to implement DRM features in future releases. It is likely that hardware devices, including cell phones and many entertainment appliances, will also embed DRM features and options. The DRM architectures we discussed in this section will be supported by these technical advances but how quickly, and how effectively, remains to be seen. DRM solution adoption will likely be driven more by economics than technologies. It is still early in the “melding process.” But as one senior information professional reminds us, “Until a workable approach in addressing intellectual property rights is developed, we cannot realize the potential of digital libraries.”27

“How close are we to the Semantic Web that [Tim] Berners-Lee describes? Yes, and my American garage door talks to my Belgian toaster, and they agree I am hungry. Great idea. I think it will take a long time to realize, and that we will go through several generations of enabling technologies before we find ones that are suitable to actually get the job done.”28

—Herbert Van de Sompel

PDA illustrationWhich technologies have captured the attention of the information consumer? Four technologies should be on your to-do list for 2004.

Wi-Fi, short for wireless fidelity, is a technology that has captured the heart of the information consumer and is filling tables at coffee shops across the world. Public wireless Internet access via “hotspots” is a customer service technology worth reviewing this year. Many libraries are already experimenting with or implementing Wi-Fi in their institutions. There are security concerns and the relatively short range reach of hotspots and ability to figure out the right financial model are still hurdles to clear. Jupiter Research reports that 6 percent of U.S. consumers have used Wi-Fi services in a public place1. Why not make the library the first public place for the next 50 percent?

The high school students interviewed for the scan told us that the technology tool they wanted most was a PDA device that “contained all the information they needed to do their work.”2 Vendors are responding. Several vendors now offer PDAs under $100, making it possible for the information consumer to get a PDA for about the price of two video games. Personalization, alert technology and other PDA-friendly information services have brought a world of convenience to the business user. The information consumer is ready for libraries to bring “all the information they need to do their work” to their PDAs.

Smart Cards, the “intelligent” credit card originally launched in the 1980s may finally have its year in 2004. As infrastructure elements come into place and security costs skyrocket, these access authentication mechanisms and data stores are gaining in popularity with both the information consumer and institutions. Universities, banks and governments worldwide are adopting these plastic computers. It is worth exploring how collaborative programs with other local or campus agencies could deliver new and innovative customer services.

1. Matt Villano, “Wi-Fi is Hot but Users Still Warming to It,”
www.wi-fiplanet.com/news/article.php/3111721 (December 4, 2003).
2. OCLC Focus Groups, Columbus, Ohio (November 12, 2003).

Hype or hope?

Our review of the technology landscape identified four major trends. The first, a rush to find ways to bring structure to unstructured data—giving rise to powerful search engines and the emergence of automatic data categorization techniques. Second, we highlighted the move away from highly integrated technology architectures to more distributed, component-based software solutions and the associated rise in Web services. The third major trend identified is the maturing of open-source solutions as legitimate components to an IT department’s technical strategy. Finally, we provided a review of some of potential DRM architectures that may help support the growth of digital libraries.

These four trends may be among the more significant developments shaping the technology landscape, but they represent only a fraction of the technological advancements that information professionals must access and evaluate. While it would be impractical to list the hundreds of emerging technologies and standards uncovered during our research, we want to provide an overview of a few more technologies that we feel may have an impact on the future shape of the information landscape.

We feel it is important not only to identify these technology trends, but to present them in frameworks that information professionals could use to separate “the hype from the hope” of these new and emerging technologies and tools. What tools are being adopted today? Which technologies are not yet ready for prime time, but may shape the landscape in the next 5–10 years? Which of today’s hot technologies may not survive?

We conclude our review of the technology landscape by taking a broad look at several of the specific technologies shaping the future of knowledge management. To provide that overview, we use an adoption framework called “hype cycles” that was developed by Gartner, Inc., the world’s leading technology research and advisory organization.30 Widely used today to help technology professionals assess the maturity of emerging technologies, the hype cycles can provide an interesting view of many of the technologies impacting areas of interest. Gartner provides over 100 hype cycles to its clients. They have granted OCLC permission to use two of those hype cycles for review in this report: the Hype Cycle for Knowledge Management and the Hype Cycle for Web Services.

Since 1995, Gartner has used hype cycles to characterize the over-enthusiasm or “hype” and subsequent disappointment that typically happen with the introduction of new technologies. Hype cycles show how and when technologies move beyond the hype to offer practical benefits and become widely accepted. Gartner currently offers over 100 hype cycles to their clients covering a vast array of technologies including: Web services, XML technologies, Open-source technologies, advanced analytics, application development, mobile and wireless networking, personal computers and more.29

For more information see: www.gartner.com

The Hype Cycle for Knowledge Management, 2003 identifies 23 technologies or solutions that Gartner feels will influence the future development of knowledge management. To understand a technology or technical solution’s placement on the curve is a helpful management device. Gartner has added the element of “human attitude” or “market hype” to the traditional production adoption curve to allow information managers the opportunity to factor in the impact of hype, both positive and negative, on strategic investment decisions. Four of the solutions on the Hype Cycle for Knowledge Management—packaged methodologies, document management, best-practices programs and Web content management—have reached the “plateau of productivity” phase on the curve, indicating that they have been adopted by at least 30 percent of the market and are being deployed today as knowledge management enablers. Gartner plots the remaining 19 of these technologies at various points on the curve and indicates their estimated “time to plateau.” Certain technologies, such as personal knowledge networks and corporate blogging, are very early in the cycle according to Gartner. Others have passed through the “peak of inflated expectations” and are perhaps currently no longer making press headlines, sitting in the “trough of disillusionment.” Automated text categorization, discussed earlier in this section, is located in the trough. Gartner suggests that these technologies should not necessarily be discounted simply because they have fallen from the headlines as they may provide interesting potential that could be realized in a more quiet phase of the adoption cycle. According to its placement on this chart, Gartner estimates that automated text categorization will reach the plateau of productivity with the next two to five years.

Several of the top trends and technologies identified in this scan—e-learning, taxonomies and collaboration techniques—are plotted on the Knowledge Management Hype Cycle.

In the Hype Cycle for Web Services, 18 technical solutions are plotted to provide a guide to the ever-growing number of Web services solutions that are available today or will be available in the next decade. Web services tailored for specific industries and applications as well as Web services for infrastructure, security, networking and portals, all appear to be on the horizon.

 
Hype cycle for knowledge management, 2003
Terminology definitions

Personal Knowledge Networks
Virtual networks centered on individual knowledge workers

Corporate Blogging
The application of “Web log” styles to corporate objectives

Information Quality
A characteristic that makes information suitable to support knowledge work

Idea Management
A process for developing, identifying and using valuable insights

Information Extraction
Culling concepts from unstructured data

Virtual Community
A self-selecting, peer-to-peer group that connects people by interest, skills and practices

 

Semantic Web
Extends the Web through semantic markup languages that describe entities and their relationships

Personal Knowledge Management
Powerful KM systems on the desktop

Smart Enterprise Suites
The convergence of portals, content management and collaboration functionality into a single product

Taxonomy
A classification of information components and the relationships among them

Expertise Location and Management
A tacit knowledge capture and sharing process

Real-Time Collaboration
Interaction between participants in real time using a meeting or presentation format

 

Records Management
The management of knowledge content through its complete life cycle

Competitive Intelligence
The analysis of an enterprise’s business environment

Automated Text Categorization
Use of statistical models or hand-coded rules to rate a document’s relevancy to specific subject categories

E-learning
The use of electronic technologies to deliver cognitive information and training

Team Collaboration Support
Tools that bring together real-time communications and asynchronous collaboration for teams

Information Retrieval/Search
The retrieval of documents based on a metric applied to a user’s query

Virtual Teams
A project-oriented group of knowledge workers who do not physically work together

Web Content Management
Controlling Web site content with specific tools

Best-Practices Programs
A process of capturing and sharing process-oriented knowledge

Document Management
A server-based repository that offers library services

Packaged Methodologies
Capturing and using process-oriented knowledge

 
Hype cycle for web services, 2003
Terminology definitions

Web Services Operations Managers
Address out-of-band management of Web services

Web Services Brokers
Provide security and deliver intelligence for internal Web services

Web Services Networks
A brokering service that supports digital collaboration between applications

External Web Services Deployments
Web services that provide data interchange and application integration

Web Services for Remote Portals
A common means for portals to obtain and display information

Web Services for Business Process Management
Web services used to circumscribe and initiate business processes

Web Services Security Standards
Standards that establish methods through which Web services can be connected securely

Web Services for Supply Chain Management
The use of Web services technologies to improve connections for buying and selling

Web Services-Enabled Business Models
Approaches for doing business impossible without the benefits of Web services

Web Services for Customer Relationship Management
CRM applications serving as producers or consumers of Web services

Secure Web Services
Implementations of Web services that resist computer attack

Portals as Web Services Consumers
The use of an enterprise portal through which the results of Web services are displayed

Universal Description Discovery and Integration
A type of service to publish, search for and use Web services

XML Veneer Approach
Uses XML to transport data without using Web services

Web Services Description Language
A formal XML vocabulary and grammar that describe, discover and use Web services

Internal Web Services
The use of Web services to accomplish noninvasive integration

Simple Object Access Protocol
Allows one application to invoke a remote procedure call on another application

XML Over HTTP
Uses XML and XML standards, but not Web services standards

Technology Landscape:Previous 1 | 2 | 3 | 4 | 5 | 6 Next