System, method, and apparatus for securely providing content viewable on a secure device

An apparatus for securely playing content, comprising:

• (a) a loader configured to receive a screener key associated with a selectively encrypted content stream, wherein the screener key is encrypted using a public key that is bound to the apparatus such that the public key is unique to the apparatus;
• and
• (b) a decryption engine, coupled to the loader, that is configured to perform actions, including:
• (1) receiving the selectively encrypted content stream;
• (2) employing the loader to retrieve the screener key;
• (3) decrypting the screener key using a private key associated with the public key, wherein the private key is constrained to the apparatus;
• and
• (4) employing the screener key to decrypt a content key, wherein the content key enables decryption of the selectively encrypted content stream.

A method for creating secure content for use in a player, the method comprising:

• (a) selectively encrypting at least a portion of a content stream using a content key;
• (b) generating a key package comprising the content key;
• (c) encrypting the key package using a screener key;
• (d) encrypting the screener key employing a public key bound to the player such that the public key is unique to the player;
• (e) embedding the encrypted key package into the selectively encrypted content stream.

A method for securely playing a content stream, comprising:

• (a) receiving the content stream, wherein the content stream comprises at least one selectively encrypted content unit;
• (b) receiving a key package, wherein the key package is encrypted using a screener key;
• (c) retrieving the screener key, wherein the retrieved screener key is encrypted using a public key;
• (d) decrypting the retrieved screener key using a private key associated with the public key wherein the private key is constrained to a content stream player such that the public key and the private key are unique to the content stream player;
• (e) decrypting the key package using the decrypted screener key;
• and
• (f) decrypting at least one selectively encrypted content unit using the decrypted content key.