---
title: "DRM Blacklist Management Guide"
description: "This document explains how to use the DRM blacklist feature to block the issuance of licenses to users or client devices suspected of illegal use of your service."
---
> For the complete documentation index, see [llms.txt](https://docs.doverunner.com/llms.txt).

DoveRunner Multi-DRM service provides `DRM Blacklist Management` feature that allows OTT platforms to block issuance of DRM licenses to users or client devices suspected of piracy or unauthorized content use. Customers can register, view, and update the IDs of users or devices to be blocked via HTTP API or the Blacklist Management section of the DoveRunner Console web UI.

```mermaid
sequenceDiagram
    participant A as OTT User<br/>(Client Device)
    participant B as OTT Platform
    participant C as DoveRunner Server
    A ->> C: Request DRM License (Non-blacklisted)
    C ->> C: Verify License Token
    C ->> A: Issue DRM License
    A ->> A: Play Content
    opt Blocking via Blacklist
    B ->> C: Register illegal user or device ID
    C ->> C: Store the ID in Blacklist DB
    A ->> C: Request DRM License (Blacklisted)
    C ->> C: Verify Token and Check Blacklist
    C -->> A: Deny License Issuance
    A -->> A: Cannot Play Content
    end
```

:::note 

The definitions of `user ID` and `device ID` used in the DRM blacklist feature are as follows 
- `User ID`: The value of `user_id` in the token data used for DRM license acquisition. If you do not enter this value when creating a token, or enter a random value that is not related to the end user, you cannot apply the blacklist for the user ID.
- `Device ID`: The Device ID value included in the DRM license response data. It can be found on the `Content Security` > `Multi DRM` > `Analytics` screen. The ID may not be unique depending on the client environment, such as browsers.

The device ID is related to the type of DRM supported by the device. If a device supports multiple DRMs, each type of DRM will have a different device ID.

:::

## Blacklist Management via Console 

You can register, view, and change the status of a blocked user ID or device ID on the `Blacklist Management` screen of DoveRunner Console.

### Managing User Blacklist

After logging in to DoveRunner Console, go to `Multi DRM` > `Blacklist Management` > `User Blacklist` menu, and you can manage the blacklist for user ID on the following screen. 

![User Blacklist Management](https://docs.doverunner.com/img/content-security/blacklist-user-id-list-en.png)

#### Looking up blocked users 

On the User Blacklist screen, you can apply various search criteria to view the user IDs and current status of blacklisted users. 

#### Registering user IDs to be blocked 

Click the `Register` button on the User Blacklist screen to go to the `Register User ID` screen as shown below.

![Register User ID](https://docs.doverunner.com/img/content-security/blacklist-register-user-id-en.png)

If you are entering multiple IDs, you can add entries with the `+` button above the `Register` button, and reduce entries by clicking the trash can button to the right of each entry.

#### Changing block status 

You can change the status (blocked or unblocked) for each blacklisted user ID. By checking the checkbox to the left of the corresponding entry in the list, the `Change Status` button will switch to `Block` or `Unblock` depending on the current status, and clicking it will change the block status of the selected target.

:::note 

For user IDs that are switched to `Unblocked`, DRM license issuance will continue as normal as before they were blacklisted. 

:::

### Managing Device Blacklist

After logging in to DoveRunner Console, go to `Multi DRM` > `Blacklist Management` > `Device Blacklist` menu and you can manage the blacklist for device ID on the following screen.

![Device Blacklist Management](https://docs.doverunner.com/img/content-security/blacklist-device-id-list-en.png)

#### Looking up blocked devices 

On the Device Blacklist screen, you can apply various search criteria to view the device ID, DRM type, and current status of blacklisted devices. 

#### Registering device IDs to be blocked

Click the `Register` button on the Device Blacklist screen to go to the `Device ID Registration` screen as shown below.

![Register Device ID](https://docs.doverunner.com/img/content-security/blacklist-register-device-id-en.png)

For each item you want to register, select the DRM type that corresponds to the device ID and enter the value of the device ID you want to block. If you enter multiple IDs, you can add entries with the `+` button above the `Register` button, and reduce entries by clicking the trash can button to the right of each entry.

#### Changing block status 

You can change the status (blocked or unblocked) for each blacklisted device ID. By checking the checkbox to the left of the corresponding entry in the list, the `Change Status` button will switch to `Block` or `Unblock` depending on the current status, and clicking it will change the block status of the selected target.

:::note 

For device IDs that are switched to `Unblocked`, DRM license issuance will continue as normal as before they were blacklisted. 

:::

## Blacklist Management via API 

In addition to the Console UI, the DRM Blacklist feature can also be managed via HTTP API. If you need an automated integration with your system, see the blacklist APIs in the [DRM Service API](https://docs.doverunner.com/content-security/service-api-guide/#get-blacklisted-user-id-list) section of the DoveRunner Service API Guide.