Token passing technique for media playback devices

A computer enabled method for controlling distribution of media content to a player from a source, the player having an associated host device, the method comprising the acts of:

• the player exchanging authentication data with the host device;
• receiving at the player a token originating at the source, via the host device;
• sending identification data from the player to the source, the data including the token;
• and
• receiving at the player, in response to the token, at least one key relating to encryption or decryption of the content to be distributed.

A computer enabled method for controlling distribution of media content to a host device for playing on an associated player, the method comprising the acts of:

• the host device exchanging authentication data with the player;
• transmitting from the host device a request for a token from the host device to the source;
• receiving the token at the host device;
• and
• sending the token from the host device to the player;
• and
• thereby the player being enabled to decrypt or encrypt the content to be distributed.

A player for storing and playing media content received from an external source, and having a digital rights management (DRM) portion, the DRM portion comprising:

• an input/output port adapted to receive the media content and to send and receive DRM information;
• a storage for an authentication certificate of the player, coupled to the port;
• a storage for a global identifier of the player, coupled to the port;
• a storage for a token received from the source, coupled to the port;
• a key repository, coupled to the port for storing keys for decrypting the media content;
• a storage for an additional token, coupled to the port;
• and
• a processor coupled to the port and to the global identifier storage and to the token storage, and for assembling identification data including the global identifier, the token, a signature of the token, the authentication certificate, and a size of the token signature and a size of the authentication certificate to be transmitted from the port.