System Management

The majority of SmartTUBE system functions are accessed and controlled through the web-based SmartTUBE Admin Console. Fine-tuning of platform functionality is performed through the configuration files of SmartTUBE SDP components. Together, these tools provide System Administration Departments with full control over all platform functions and features described below.

Platform Management Features

• End-user Device Provisioning:
  SmartTUBE SDP includes the SmartTUBE Device Manager, a web-based service for managing firmware, apps, and configurations on all types of IPTV/OTT devices — including Linux and Android STBs, mobile, and Smart TV platforms.
  This console enables:

  • Management of software artefacts (Linux and Android STB firmware, private app repository for AOSP, configuration files)
  • Device grouping (production, staging, testing, etc.)
  • HTTP and Multicast firmware distribution
  • Software version tracking
  • Update strategy management (soft update, forced update, minimal allowed version)

• Process Automation:
  Various service tasks (e.g., EPG import, cache reload, etc.) can be scheduled for automatic execution.

• Admin Console Access:
  Operators can manage user accounts with specific access roles such as Administrator, Content Manager, Business Manager, Technical Support Specialist, and Analyst.
  Multiple roles can be assigned per user, defining access to different console features.

• Failure Alerts:
  Provides email notifications for critical events related to OSS integration, EPG or VoD metadata import, database connection limits, and other warnings.

• Device Geolocation:
  To control content access by IP range, operators can assign IPTV devices to specific subnets or use third-party services (e.g., MaxMind, under separate contract) to determine the geographic or network location of OTT devices.
  Operators may also restrict access for mobile devices switching between networks (e.g., from home Wi-Fi to cellular).

• License Usage Statistics:
  Displays detailed information about installed licenses — types, number of service accounts, and active devices.

• License Features:
  Operators can manage feature availability based on the license type.

• Remote STB Reboot:
  Allows remote rebooting of STBs by UID list or by defined conditions.

• Cache Server Data Reload:
  Enables manual metadata and settings updates on cache servers to propagate changes quickly to devices.

• Data Export:
  The Admin Console supports exporting any data stored in the SmartTUBE SDP database in CSV format.

---

Apps Localization and Customization

SmartTUBE provides a comprehensive toolkit for localizing and customizing SmartTUBE Apps (UI and UX). This process occurs in two stages:

• Initial customization — performed by SmartLabs specialists during system commissioning.
• Operational customization — performed by the operator during daily operation.

Initial Customization

Allows UI adjustments within the existing structure (e.g., main layout, animation logic) and includes:

• Interface Localization:
  The interface can be localized into the operator’s language. English is provided by default.
  Localization into languages using hieroglyphs, Arabic script, or other special alphabets is handled separately.
• Operator Logo:
  May be placed in various UI areas (upper-left corner, placeholders, splash screen, etc.)
• Color of Selected Elements
• Waiting State Animations

Operational Customization

Enables the operator to modify Home Screen and Movies/Series layouts by uploading configuration files via SmartTUBE Device Manager, applicable to all device types.

---

Security Mechanisms

SmartTUBE protects IPTV/OTT services and sensitive information from unauthorized access using multiple security layers:

• Device Activation and User Authorization:
  Each time a device connects to SmartTUBE SDP, its Device ID and serial number are validated against database records.
  Mismatched devices are denied access.

• Session Management:
  SmartTUBE SDP assigns unique identifiers to each device connection session.
  Sessions expire after a defined period to prevent resource exhaustion or potential security risks on STBs.

• Token-Based Authorization:
  Upon successful device authorization, the SmartTUBE SDP issues a unique access token. Devices must include this token in all subsequent platform requests and may optionally present it to CDN servers. This mechanism ensures that only authenticated devices can securely access the platform and its content.

• Secure Admin Console Access:
  Controlled by login and password credentials issued by system administrators.

• OSS/BSS API Security:
  External system interaction with SmartTUBE SDP APIs can be protected by authentication credentials (login and password).

• Network-Level Security:
  All communications between devices, external systems, and the SmartTUBE SDP are secured via HTTPS using valid SSL/TLS certificates. Additionally, internal session or connection control mechanisms safeguard interactions between platform nodes and the database, preventing unauthorized access or data interception.

• STB Duplication Protection:
  Built-in STB mechanisms prevent device cloning and counterfeit risks.

---

Licensing

SmartTUBE licensing offers two options — SmartTUBE Basic and SmartTUBE Ultra — providing different levels of functionality and scalability.

---

Licensing Models

SmartTUBE licenses are issued based on the number of service accounts and active devices.
Operators can purchase one or more simultaneously active license types:

• License by Accounts:
  Counts only active service accounts — those not in Suspended, Trial Closed, Closed, or Deleted status, regardless of service usage.

  Account Status Definitions:

  • Suspended: Account linked to a predefined device; activates automatically on app launch.
  • Trial Closed: Trial period expired; app access blocked.
  • Closed: Contract terminated; app access permanently blocked.
  • Deleted: Account removed; app access permanently blocked.

• License by Devices:
  Counts only active devices — those with a valid UID linked to an active account and authorized at least once.
  Optionally, devices can be filtered by last authorization date.
  The operator specifies which device types are covered.

UID (Unique Identifier) Definitions:

• License by Service Account with Devices:
  Counts active service accounts restricted to specific device types.
  The operator defines the maximum number of active devices per license.

---