Methods and apparatus for protecting digital content

A protected digital content provisioning system comprising:

• a candidate receiving device;
• and
• a processing system, to serve as a source device for protected digital content, comprising a processor and control logic which, when used by the processor, results in the processing system performing operations comprising:
• determining the processing system does not contain a master key for a candidate receiving device that is coupled to the processing system;
• based on the determination, generating a first key and transmitting the first key to the candidate receiving device;
• receiving a value from the candidate receiving device;
• determining a hash value based on the first key and the value and comparing the hash value with a hash value, obtained from the candidate receiving device, which is also based on the first key and the value;
• authenticating the candidate receiving device based on the comparison;
• generating a second key based on the first key and the value;
• and
• encrypting a session key based on the second key and transmitting the encrypted session key to the authenticated receiving device.

At least one non-transitory machine-accessible medium having instructions stored thereon, the instructions when executed on a processing system cause the processing system to:

• generate a first key and transmit the first key to a candidate receiving device;
• receive a value from the candidate receiving device;
• determine a hash value based on the first key and the value and compare the hash value with a hash value, obtained from the candidate receiving device, which is also based on the first key and the value;
• authenticate the candidate receiving device based on the comparison;
• generate a second key based on the first key and the value;
• and
• encrypt a session key based on the second key and transmit the encrypted session key to the authenticated receiving device.