AES-128 LMS: Pro-Level Serverless Learning Management System

🔗 Repository: https://github.com/Amber-bisht/aes128-lms-admin-lambda-nextjs

A high-performance, secure, and scalable Learning Management System (LMS) built with a strong focus on premium content protection and cloud-native architecture. This project showcases advanced engineering practices including AES-128 HLS encryption, serverless video processing, and a microservices-based backend.

---

🏗️ Architecture Overview

Designed as a hybrid-cloud system, combining VPS-hosted core services with AWS-managed infrastructure for scalability and heavy workloads.

🔐 Content Protection (DRM-Inspired, Cost-Efficient)

• ECDH Handshake
  Establishes a session-based shared secret using Elliptic Curve Diffie-Hellman. The AES key is never exposed in plaintext, preventing interception.

• WASM-Based Protection
  Critical decryption and key derivation logic is compiled into AssemblyScript WebAssembly, making reverse engineering significantly harder.

• HLS AES-128 Encryption
  Video .ts segments are encrypted using AES-CBC and decrypted dynamically via worker threads.

• Dynamic Watermarking
  Injects user-identifiable overlays (email) that move periodically, discouraging screen recording and enabling leak tracing.

• Behavioral Analysis
  Detects abnormal access patterns (e.g., rapid segment fetching) and flags suspicious activity.

---

🛡️ Secure Delivery & Monitoring

• Signed URLs (CloudFront)
  Time-restricted access to video segments.

• Multi-IP Tracking
  Detects account sharing by logging IPs and user agents per session.

• Admin Security Dashboard
  Real-time insights into flagged users, access logs, and suspicious behavior.

---

🚀 Key Features

• Next.js 16 Frontend
  High-performance UI optimized for speed and SEO.

• AMBER Handshake (ECDH)
  Per-session encryption key exchange for secure playback.

• WASM Decryption Layer
  Hardened execution layer for secure media handling.

• Anti-Piracy Dashboard
  Real-time monitoring of download abuse and sharing.

• Microservices Backend
  Decoupled services for LMS, authentication, and student management.

• Custom HLS Player
  Manual AES decryption for tighter control and security.

• Razorpay Integration
  Seamless course purchase and payment handling.

• Dockerized Deployment
  Containerized services with CI/CD pipelines.

• Global CDN (CloudFront)
  Low-latency streaming across regions.

---

🛠️ Tech Stack

Frontend

• Next.js, TypeScript
• HLS.js, Web Workers
• TailwindCSS

Backend

• Node.js / Express (Microservices)
• API Gateway Proxy

Database

• PostgreSQL (Neon Serverless)
• Prisma ORM

Infrastructure

• AWS Lambda (Video processing & encryption)
• AWS S3 (Storage: raw + processed media)
• AWS CloudFront (CDN delivery)
• Docker & Docker Compose

CI/CD

• GitHub Actions
• GHCR (Container Registry)
• VPS Deployment (appleboy/ssh-action)