Video Access Control

Video access control determines who is allowed to watch a video, from where, and on what device. It combines authentication (tokens, OTP, SSO), and restrictions by geography, IP, domain, device, and concurrency. It governs entry to the content, complementing encryption and DRM, which govern the content itself.

What is Video Access Control?

Video access control decides who may watch a video, from where, and on which device. Where DRM protects the stream itself, access control protects the door to it.

How It Works

Before serving a manifest or license, the platform checks entitlement: is this viewer authenticated, do they own this course, are they in an allowed country, on an authorized domain and device, and within the concurrent-stream limit. These checks happen server-side so clients cannot tamper with them.

Common Controls

  • Authentication: Token, OTP, JWT, or SSO to prove identity and entitlement.
  • Geo and IP restriction: Limit playback to permitted regions or networks.
  • Domain and device restriction: Bind playback to approved sites and devices.
  • Concurrency limits: Cap simultaneous sessions per account.

For Platform Owners

Access control and DRM are complementary. Tokenized access decides entry; DRM ensures that even an authorized viewer cannot copy the stream. Strong platforms enforce both together.

See Also: Token AuthenticationGeo-Restriction (Geo-Blocking)Device Restriction (Device Binding)Concurrent Stream LimitDomain Restriction