Technique for securely communicating and storing programming material in a trusted domain

A method for use in a first device to which encrypted content is transported from a second device, the first device and the second device both being associated with a user, the encrypted content being decrypted in the first device using a first cryptographic element, the method comprising:

• receiving a first encrypted version of the first cryptographic element from the second device, the first encrypted version of the first cryptographic element being generated by encrypting the first cryptographic element using a second cryptographic element which is unavailable to the first device and is associated with the user;
• providing the first encrypted version of the first cryptographic element to an apparatus remote from the first device, the apparatus recovering the first cryptographic element based on at least the first encrypted version of the first cryptographic element and data representative of the user;
• receiving from the apparatus a second encrypted version of the first cryptographic element, the second encrypted version of the first cryptographic element being generated by encrypting the recovered first cryptographic element using a third cryptographic element which is associated with the first device;
• and
• recovering the first cryptographic element to decrypt the encrypted content based on at least the second encrypted version of the first cryptographic element.

A device for receiving encrypted content from a storage unit, the device and the storage unit both being associated with a user, the encrypted content being decrypted in the device using a first cryptographic element, the device comprising:

• a first interface adapted to receive a first encrypted version of the first cryptographic element, the first encrypted version of the first cryptographic element being generated by encrypting the first cryptographic element using a second cryptographic element, and the first encrypted version of the first cryptographic element being unusable by the device;
• a second interface adapted to receive a second encrypted version of the first cryptographic element, the second encrypted version of the first cryptographic element being generated by encryption of the first cryptographic element using a third cryptographic element which is associated with the device, the second encrypted version of the first cryptographic element being provided to the device by a remote entity in response to the device providing the entity the first encrypted version of the first cryptographic element;
• and
• a module adapted to recover the first cryptographic element to decrypt the encrypted content based on at least the second encrypted version of the first cryptographic element.

A device for processing encrypted content, comprising:

• a first apparatus adapted to:
• receive first data comprising a first cryptographic element after it has been encrypted using a second cryptographic element associated with a user;
• and
• receive second data from a second apparatus remote to the device, the second data being received after it is confirmed that the device associated with the user, the second data comprising the first cryptographic element, after it has been encrypted using a third cryptographic element associated with said device;
• a module adapted to recover the first cryptographic element from the second data;
• and
• a module adapted to decrypt the encrypted content using the recovered first cryptographic element.

A method for operating a device for receiving encrypted content from a storage unit, the device, the storage unit, and a user all being associated with a subscriber account, the method comprising:

• receiving at a first interface a first encrypted version of the first cryptographic element, the first encrypted version of the first cryptographic element being generated by encrypting the first cryptographic element using a second cryptographic element associated to the user;
• receiving at a second interface a second encrypted version of the first cryptographic element from an apparatus remote to the device, the apparatus determining that the device and the user are both associated with the subscriber account, the second encrypted version of the first cryptographic element being generated by encryption of the first cryptographic element using a third cryptographic element which is associated with the device;
• recovering the first cryptographic element;
• and
• decrypting the encrypted content based on at least the second encrypted version of the first cryptographic element.