SolutionsWidevine
Exam and assessment video
Question material that must not survive the exam window
Checking this device
Reading the DRM capabilities your browser reports.
Content: Shaka test asset (Angel One, Widevine). Licence: public test server, no authentication.
This device
- Widevine
- checking
- PlayReady
- checking
- FairPlay
- checking
- Highest robustness
- checking
- HDCP 2.2
- checking
- Policy decision
- checking
Licence log
- The check above is live. On a device without hardware-backed decode it refuses to play, as a real exam deployment would.
- There is an override button so you can see the player regardless. A real deployment would not have one.
- Playback uses Google's public Shaka test video and an unauthenticated test licence server. No real exam content is involved.
The problem
Exam video is the hardest case in corporate media. The content is worthless once it leaks, and the people watching it have a reason to copy it. A question bank that reaches a forum invalidates the sitting, and sometimes the accreditation behind it. Here the strict settings are proportionate: hardware-backed decode, output protection, one device, a licence that lasts minutes, and a watermark that identifies the candidate in any recording that gets out.
What this demo shows
- A policy check that refuses playback, and says why, if your device cannot do hardware-backed decode
- An HDCP 2.2 check against your current display and cable
- A visible watermark that moves around the frame, so it cannot be cropped out without losing the picture
- Why one device and a short licence matter most for this use case
- The record of licence decisions an awarding body will ask to see
The policy, and why it is set this way
Each setting trades protection against convenience. The settings that suit exam video would make compliance training unwatchable for many of the staff who need it.
- EntitlementBooked sitting, identity verified
- The licence is tied to a specific exam booking. Outside the booked window there is no key to issue.
- Licence duration90 minutes, single use
- The licence ends with the sitting, so one captured in transit is useless an hour later.
- Concurrent devices1
- A second device during an exam is either a second person or a recording rig. Either way, it should be refused.
- OfflineRefused
- A persistent licence would leave the content on a candidate's disk with a key next to it. That is never acceptable for question material.
- RobustnessHW_SECURE_DECODE
- With software decode, decrypted frames end up somewhere a determined candidate can reach. Hardware-backed decode keeps them in the protected path.
- Output protectionHDCP 2.2 required
- HDCP stops a cheap HDMI capture card and casual screen mirroring. It will also refuse a candidate with an old monitor, and you accept that support cost on purpose.
Related product
Exam and assessment video is a use case for Licence Gateway: DRM licences under one policy model.
Read about Licence GatewayThe other solutions
Each uses Widevine with a different policy.
Video projects without DRM
Uploads, encoding, live, captions and analytics on Cloudflare.
- Serverless video platformUploads, encoding, captions and signed playback with no servers to run
- FFmpeg encoding on Cloudflare ContainersYour own ladder and packaging, started by an upload, served from R2
- Sub-second live with WHIP and WHEPLive auctions, Q&A and watch-alongs where a few seconds of delay is too much
- Searchable video archiveFind the moment in hours of recordings by what was said
- Thumbnails and previews by URLHover previews, thumbnails and storyboards for a clip library, with no batch jobs
- Instant clips from a live streamViewers clip the moment they just saw and share it while the event is still on
Talk about your own content
Training, assessment, or confidential internal video. Tell us what has to be protected and from whom.
128 City Road, London, EC1V 2NX, United Kingdom
17420568
Registered in England and Wales