Here's a situation.
I am the author of an app that allows my customers to stream videos on their local android device. I also allow them to download the video and store it locally on their android device itself.
But now I want to restrict the distribution of the downloaded video somehow. I want to ensure that the downloaded video can not be simply distributed to another user, who is not even registered with my app.
How can I achieve this ?
Some solutions that I could think of :
Encrypting the video with a key that's bound to my registration ID. The problem is that the key will need to be stored on the device itself. And if the device is rooted/compromised the key can be retrieved. Making an auth request before every time the video is allowed to be played locally. The problem is that is defeats the intended purpose of the offline playing of the video. Hence, not something very desirable.