MediaSeal – encryption while you work

MediaSeal® is an advanced security solution for post-production. It protects sensitive media files from pre-release leaks caused by shared access, accidental distribution, system hacks and piracy.

MediaSeal combines sophisticated data encryption with multi-layer access control and comprehensive security auditing. Files are encrypted, not only in-transit—when being transferred between studios and facilities—but also at-rest—when stored on a workstation, server or cloud. Data cannot be compromised even if it’s stolen. Centralized access control allows permissions to be managed across entire workflows, and provides detailed audit trails of user activity. Access to data can be granted, modified and revoked from one location. Multi-factor authentication employs password management, remote authentication, decryptor software and iLok/soft key protection for the strongest possible user verification.

MediaSeal is the best way for post-production operations to protect valuable media assets, meet compliance standards, and ensure only authorized users have access to files.

MediaSeal is available through per-user, per-month subscription, or pay-as-you-go plans based on usage.

“MediaSeal is the cornerstone of the media protection process at our stages in L.A. MediaSeal renders files unplayable outside our facilities.” —Mark Kondracki, principal, Outloud Audio

Outloud Audio Adopts Fortium’s MediaSeal File Level Encryption to Meet Heightened Security Threats. Become MediaSeal enabled or set up a no-obligation encryption while-you-work trial by contacting us - sales@mediaseal.com.

LiveFolders - Encryption on-the-fly

A new feature of MediaSeal, LiveFolders enhances security by making encryption automatic and transparent. Files are encrypted instantly when saved to a LiveFolder and decrypted automatically when accessed by an authenticated user. Files are encrypted whenever they are created, saved or transferred. Sensitive content is kept safe from hackers and accidental sharing with unauthorized parties. An essential component to total workflow security, LiveFolders makes encryption fast, simple and routine.

Contact us for more information on how Live Folders encryption on the fly could help you keep sensitive content secure.

Why MediaSeal?

If you have series premier or movie in the pipeline and are concerned about the risk of leaks ahead of release, then MediaSeal is the ideal solution to use during post production. MediaSeal secures files in collaborative workflows when shared across departments and vendors during post production protecting from accidental or unauthorized distribution. MediaSeal is file agnostic and compatible with all professional editing programs (Avid, Adobe, Final Cut etc). Sunrise sunset & revocation DRM, multiple factor authentication and used by leading TV and film studios.

MediaSeal file security enables to be encrypted at-rest while being worked on in any programs during collaborative workflows. Files can only be accessed by authorized users. All user activity is audited and logged by the administrator:

  • Relevant for all premium content
  • Encryption at-rest - all files all programs
  • Easy to use, no impact on workflows
  • Risk mitigation from leaks & piracy
  • Audit & logging of content

MediaSeal is a robust, multi-layered content security platform that has been specifically designed for post-production environments. It ensures that all sensitive files can be encrypted while being worked on in sound and picture editing, localisation and marketing. Its multi-layer security authenticates authorized users through hardware keys with AES encryption wrappers.

MediaSeal is the only solution compatible with complex workflows for protecting sensitive content from pre-release piracy.

How MediaSeal works

MediaSeal users are split into two categories: Encryptors and Decryptors. The Encryptor user encrypts sensitive content via the MediaSeal Encryptor application. During this process, they select from a list of Decryptor users who will be able to access the encrypted file(s). After encryption is complete, files are sent to the Decryptor user using standard workflow methods (Fast File Transfer, email attachment, Dropbox, physical storage etc.).

The Decryptor recipient is the person in post-production (audio, sound, translation, vfx etc.) who will access the file. They would attempt to open the file as normal and and find it is MediaSeal protected; they simply enter a password as prompted by the MediaSeal Decryptor application and then, whilst their iLok is inserted, will continue with their normal workflow.

  • Post-production files are encrypted at-rest – and stay encrypted while being accessed.
  • Completely file agnostic, works with any file in any application in Mac, Windows and Linux.
  • Sunrise/Sunset timed access means files can set to open at a given time, be automatically locked on a given date and access can be revoked.
  • Our On-Boarding portal means new users can easily set up within minutes.
  • Full audit trails for who has accessed or saved out files – and whether unauthorized access has been attempted.
  • Integrates into the Avid Suite – with integration directly into Avid features actively being developed.
  • Integrates into Fast File Transfer solutions from Aspera and FileCatalyst

What are the threats?

The theft of a clip, script, audio track or image can have devastating consequences. If it involves an unreleased television show, movie or audio recording, it can result in reduced viewership and product sales.(According to Carnegie-Mellon research, a leak before release can cause box-office takings to be 19.1% lower than a leak after release). Piracy harms business reputations and relationships. It also represents an attack on the creative process.

Pre-release leaks cannot be wholly eliminated. Even the best internal controls can leave a company vulnerable to a lost laptop or a misaddressed email with a DropBox link. Leveraging the latest encryption and access control technology, MediaSeal reduces the risk of such leaks from accidental distribution or a stolen hard drive. Relied on by studios and facilities worldwide, MediaSeal has successfully protected hundreds of television and movie productions from pre-release leaks, for both small independent titles to billion dollar blockbuster titles.

 

Videos

MediaSeal Encryption at-rest: Protecting Content

MediaSeal Encryption at-rest: Viewing encrypted content

Testimonial

"I've been doing a lot of international work from my studio which brings up the encryption question... and I have to say MediaSeal was quite amazing. That was one of the most secure methods I've come across."

Dave Whitehead - White Noise - Taken from Asia Pacific Broadcasting Magazine

Frequently Asked Questions

General FAQ

Do I need to decrypt a MediaSeal encrypted asset before I can use it inside my application?

No, MediaSeal works transparently at the file system level.  As long as the application in question is on our MediaSeal approved list it should open seamlessly without first requiring to decrypt the asset first.

What's the Decryptor Software?

To open a MediaSeal encrypted file you need to install MediaSeal Decryptor software. Email: info@mediaseal.com to license and download the Decryptor software.

The Decryptor software enables the intended recipient to open protected files in the relevant editing program or media player. The application sits silently in the Apple menu bar or in the Windows system tray, and together with a licensed-iLok key, you will be prompted for a password when you open a MediaSeal-encrypted file.

Where can I find an iLok?

To source an iLok key go to www.ilok.com or from Pace, Amazon, Avid and others.

What's an iLok?

An iLok is a USB device that hosts licences for certain software products. MediaSeal uses iLok's as another means for authorizing users, since every iLok has a unique identifier.

Do I need an iLok for MediaSeal to work?

MediaSeal can be used with a 'soft' licence, although we do recommend using an iLok for the extra layer of security it provides.

Do I need to download any software to access encrypted files?

Yes, you'll need our decryptor application. Without this software, your workstation will not be able to gain access to encrypted files.

Do I need to be online to make MediaSeal work?

MediaSeal can be implemented in both online and offline working environments.

MediaSeal is more feature rich when users can use point-to-point server authentication. We can help you with setting this up if needed.

What file types can be encrypted?

MediaSeal encryption is file agnostic. This means any type of file can be encrypted. They also stay encrypted whilst being accessed.

Can I use any program to access the encrypted files?

Any program on the MediaSeal list of approved applications can access encrypted files. If you need an additional application added to our list please contact support@mediaseal.com

Through our own internal testing the only program we have found that doesn't work with MediaSeal is Digital Performer 9.

What happens if I leave the encrypted files open but take my iLok key with me?

Files will remain open, however a spoiler screen will appear blocking visual access to the screen until either the iLok is placed back into the machine or encrypted assets are closed.

What if I have accidentally sent encrypted files to the wrong person?

Nothing whatsoever. The files are encrypted, so the unintended recipient would not be able to access them.

Does MediaSeal support multi-factor authentication? What factors are these?

A file can only be accessed if:

  • The person attempting access is authorized to access the file (DRM server authentication)
  • They have their unique iLok that corresponds to their MediaSeal Decryptor account (physical authentication)
  • Password to access the file

 

Without all these being correct, the user cannot gain access to an encrypted file.

How fast is the encryption?

The encryption overhead is very small, hence the encryption can easily match the speed of a simple copy operation.

How technical is all this to setup?

Not very. We handle as much of the implementation as we can, so you can focus on whatever project it is you are working on.

I need a password to access files. Is this different for each file or user?

The password can be changed for each file that is encrypted. You can also have MediaSeal set up so each user has a unique password that only they can use to access a file.