Method and system to securely store and distribute content encryption keys

1. A method comprising:

receiving a product key at a service provider, the product key:

received from a first content provider, and

encrypting a first content controlled by the first content provider;

encrypting the product key within a first secure device at the service provider using a storage key; and

storing the encrypted product key at the service provider.

2. The method of claim 1 , wherein the product key is encrypted when provided by the first content provider to the service provider.

3. The method of claim 2 , wherein the encryption is performed using the first secure device's public key.

4. The method of claim 2 , comprising decrypting the product key within the first secure device at the service provider.

5. The method of claim 4 , wherein the decryption is performed using the first secure device's private key.

6. The method of claim 1 , comprising receiving a plurality of product keys from a plurality of content providers, each of the product keys encrypting content controlled by the respective content providers.

7. The method of claim 6 , wherein each of the plurality of product keys is signed using a respective content provider private key.

8. The method of claim 1 , comprising:

receiving a request to access the first content at the service provider from a requestor;

within the first secure device at the service provider:

decrypting the product key, encrypted with the storage key,

decrypting a requestor secret key, associated with the requestor, and

encrypting the product key with the requestor secret key; and

communicating the product key, encrypted with the requestor secret key, to the requestor.

9. A method comprising:

receiving a product key at a service provider, the product key:

being received from a first content provider,

encrypting a first content controlled by the first content provider, and

being encrypted;

decrypting the product key within the first secure device at the service provider;

encrypting the product key within the first secure device at the service provider using a storage key associated with the first secure device; and

storing the encrypted product key at the service provider.

10. A method comprising:

receiving a product key at a service provider, the product key:

being received from a first content provider,

encrypting a first content controlled by the first content provider, and

being encrypted with a secure device public key of a first secure device of the service provider;

decrypting the product key using a secure device private key;

encrypting the product key using a storage key; and

storing the encrypted product key at the service provider.

11. A system comprising:

a first content provider; and

a service provider, coupled to the first content provider via a network, to receive a product key, wherein the product key is received from the first content provider and used to encrypt a first content controlled by the first content provider;

wherein the service provider is to encrypt the product key within the first secure device at the service provider using a storage key; and wherein the service provider is further to store the encrypted product key.

12. The system of claim 11 , wherein the first content provider is to encrypt the product key before providing the product key to the service provider.

13. The system of claim 12 , wherein the encryption is performed using the first secure device's public key.

14. The system of claim 12 , wherein the service provider is to decrypt the product key within the first secure device.

15. The system of claim 14 , wherein the decryption is performed using the first secure device's private key.

16. The system of claim 11 , comprising a plurality of content providers, coupled to the service provider via a network, wherein the service provider is to receive a plurality of product keys from the plurality of content providers, each of the product keys encrypting content controlled by the respective content providers.

17. The system of claim 16 , wherein each of the plurality of product keys is signed using a respective content provider private key.

18. The system of claim 11 , wherein the service provider is to:

receive a request to access the first content from a requestor;

within the first secure device:

to decrypt the product key, encrypted with the storage key,

to decrypt a requestor secret key, associated with the requestor, and

to encrypt the product key with the requestor secret key; and

communicate the product key, encrypted with the requestor secret key, to the requestor.

19. A system comprising:

receiving means, to receive a product key at a service provider, the product key:

received from a first content provider, and

encrypting a first content controlled by the first content provider;

encrypting means, to encrypt the product key within a first secure device at the service provider using a storage key; and

storage means, to store the encrypted product key at the service provider.

20. A computer-readable medium including instructions that, when performed by a computer, cause the computer to:

receive a product key at a service provider, the product key:

received from a first content provider, and

encrypting a first content controlled by the first content provider;

encrypt the product key within a first secure device at the service provider using a storage key; and

store the encrypted product key at the service provider.