Secure drm-agnostic key rotation

A system comprising:

• one or more hardware processors;
• and
• a memory storing instructions that, when executed by the one or more hardware processors, cause the one or more hardware processors to perform operations comprising:
• determining a renewal time during which a user device obtains renewal of access to a piece of content, the renewal time being a time prior to a key rotation time that differs from one or more other user devices accessing the piece of content;
• generating an initial license to the piece of content, the initial license comprising a first key to decrypt the piece of content, the initial license being associated with the renewal time;
• transmitting, via a network, the initial license to the user device;
• receiving, from the user device via the network based on the renewal time, a request to renew the access to the piece of content;
• in response to the request to renew the access to the piece of content, generating a next license to the piece of content, the next license comprising a second key to decrypt the piece of content as encrypted after the key rotation time;
• and
• transmitting the next license to the user device prior to the key rotation time.

A non-transitory machine-readable medium storing instructions that, when executed by one or more hardware processors of a machine, cause the machine to perform operations comprising:

• determining a renewal time during which a user device obtains renewal of access to a piece of content, the renewal time being a time prior to a key rotation time that differs from one or more other user devices accessing the piece of content;
• generating an initial license to the piece of content, the initial license comprising a first key to decrypt the piece of content, the initial license being associated with the renewal time;
• transmitting, via a network, the initial license to the user device;
• receiving, from the user device via the network based on the renewal time, a request to renew the access to the piece of content;
• in response to the request to renew the access to the piece of content, generating a next license to the piece of content, the next license comprising a second key to decrypt the piece of content as encrypted after the key rotation time;
• and
• transmitting the next license to the user device prior to the key rotation time.