Overview of Solutions
1. Introduction
This page gives an overview of the different services composing SSP combined in different configurations. The "SSP Platform" part can be either hosted by NAGRA in AWS as part of the NAGRA SaaS offering or it can be hosted in the operator private cloud. For completeness, the diagrams include as well the Provisioning Service (PVS), hosted by NAGRA in AWS, although this element is not part of the SSP platform and is not deployable in private clouds.
In general, unless specified differently, all the SSP external APIs are based on web standards (HTTP/ReST/JSON).
2. DVB/IPTV Deployments Protected by Connect
The following diagram covers a green field SSP deployment supporting IPTV or DVB use cases.

2.1. External Interfaces
IMS (Information Management System) exposes the APIs for channel, EPG schedule and product management:
ADM (Account & Device Manager) exposes the (23.48) Account & Device Mgt Service (ADM) for account and device provisioning.
RMG (Rights Manager) exposes the (23.48) Rights Mgt Service (RMG) to provision user's rights in SSP.
The client devices need to call the PLM (Product License Manager) (23.48) Product License Manager Service (PLM) to receive unique entitlements for DVB/IPTV content.
OpenSearch provides OTT dashboards with relevant service statistics. Details can be found in the Platform and Monitoring section.
3. DVB/IPTV + OTT Deployments in Authorization Server Mode
The following diagram covers a green field SSP deployment supporting both OTT and IPTV/DVB use cases. IMS is used to define products for live channels independently of their transport mechnanism. ADM and RMG are used to authorize the access to products defined in IMS. OTT VOD are handled using CLM authorization tokens.

3.1. External Interfaces
IMS (Information Management System) exposes the APIs for channel, EPG schedule and product management:
ADM (Account & Device Manager) exposes the (23.48) Account & Device Mgt Service (ADM) for account and device provisioning.
RMG (Rights Manager) exposes the (23.48) Rights Mgt Service (RMG) to provision user's rights in SSP.
The OTT packager is expected to use the CKM (Content Key Management service) SOAP (23.48) Content Key Management Services to retrieve key and Multi-DRM signaling.
The client devices are expected to call be PLM (Product License Manager) (23.48) Product License Manager Service (PLM) to receive unique entitlements for DVB/IPTV content.
The client devices are expected to request OTT licenses by calling the CLM license server (23.48) Content License Mgt Service (CLM).
OpenSearch provides OTT dashboards with relevant service statistics. Details can be found in the Platform and Monitoring section.
4. DVB/IPTV Hybrid Deployments Targeting Both Connect and One-Way CAS
The following diagram covers the typical deployment of SSP for DVB use cases in a simulcrypt configuration with a legacy smartcard-based CAS. A converged IMS is used to define products for live channels for both SSP and the smartcard-based CAS. ADM and RMG are used to authorized the access to products defined in IMS in SSP, the legacy interface is used for the smartcard based CAS.

4.1. External Interfaces
IMS (Information Management System) exposes a converged graphical interface and supports a converged XML based file interface (DIM/DEX).
ADM (Account & Device Manager) exposes the (23.48) Account & Device Mgt Service (ADM) for account and device provisioning.
RMG (Rights Manager) exposes the (23.48) Rights Mgt Service (RMG) to provision user's rights in SSP.
The client devices are expected to call the PLM (Product License Manager) (23.48) Product License Manager Service (PLM) to receive unique entitlements for DVB/IPTV content.
OpenSearch provides OTT dashboards with relevant service statistics. Details can be found in the Platform and Monitoring section.