Prevent Hotlinking on VOD application

I’m using WOWZA Media Server as a VOD application, and I’m looking for away to protect against hotlinking. Here’s my scenario

  • I’ve configured WOWZA to work with a SecureToken
  • My HTML5 player is protected within my application, as in users MUST login and have specific permissions to request the file that will generate a token
  • tokens are generated to expire after 30 minutes

Here’s the problem:
due to the extremely sensitive nature of my video I need to find away to have the token valid only for the current session, as in if I’m a valid user and I pull back a video then I can rightclick/view source and then copy/paste the video source URL and view the video in another net player like VLC. Obviously that link is only valid for 30 minutes, but I’d like to figure out a method for forcing the token to expire when a user trys to play it out of the session in which the token was created as described in the method above.

Primary code base for my application is PHP, and i’m using MediaCaching to pull video from a central NFS.

Would a DRM service help mitigate this problem?

Any help or advice is greatly appreciated!

protect base on session. go DRM