Protecting usage of key store content

A method of protecting usage of key store content at a given user device of an end user, the method comprising:

• (i) receiving, at the given user device, the key store content including key materials that are encrypted using encryption credentials compatible with the given user device, the key store content being created by and received from a key service provider in a format that is compatible with the given user device;
• (ii) importing the encrypted key materials of the key store content to a protected key store of the given user device and storing the key materials at the protected key store in the encrypted form, wherein all the encrypted key materials of the key store content are imported at one go, and wherein the key store content is stored at the key store in a manner that the key materials are non-exportable from the key store, and wherein keys are generated from the encrypted key materials using:
• key offsets,
• bit offsets, and/or
• byte offsets;
• and
• (iii) internally within the protected key store of the given user device, allowing one or more key store integrated services of the given user device to access the non-exportable key materials for use via key references only.