Method and apparatus for securing content using encryption with embedded key in content

Apparatus for playing content supplied from a content provider in a session, comprising:

• a first memory for storing at least a part of an encrypted content item;
• a second memory for storing information for decryption of the content item, the information being a key for decryption of the content item, the information being encrypted;
• a decryptor coupled to the first and second memories, wherein the decryption decrypts the information by a key supplied from the second memory and which is a function of session unique data and an identification of the particular apparatus;
• the decryptor being adapted to decrypt the content item using the information;
• and
• a playback portion coupled to the decryptor for playing the decrypted content item.

A computer implemented method of transferring encrypted content from a content provider to a client, in a session, comprising the acts of:

• receiving a request from the content provider to provide information for encryption of a content item;
• generating the information for decryption, and information for decryption of the encrypted content item, the information being a key for the encryption and a key for the decryption;
• transmitting the information for encryption and for decryption to the content provider;
• receiving a request to decrypt the content item from the client;
• the request including the information for decryption;
• altering the information for decryption upon receipt of same;
• and
• transmitting the altered information to the client, wherein the altered information is the key for decrypting the content item, encrypted by a key which is a function of session unique data and data associated with an identification of the particular client.

Apparatus for transferring security information relating to encrypted content from a content provider to a client in a session, comprising:

• a memory storing a menu for ordering items of the content;
• a processor coupled to the memory;
• a verification portion coupled to the processor, for verifying the content provider;
• a second memory storing a plurality of keys;
• a generator coupled to the second memory and to the processor, and which generates information for encrypting content items and information for decrypting the content items, the information in each case being a function of a content key and being encrypted by a second key which is a function of session unique data and data associated with a particular client or content provider.