Retrieval and transfer of encrypted hard drive content from DVR set-top boxes to a content transcription device

1. A system comprising:

at least one processor device;

at least one memory storing computer executable instructions that, when executed by a processor, cause the processor to perform operations comprising:

receiving encrypted content from a storage device, the encrypted content including a television program instance encrypted at a first set-top box using a content instance key, the encrypted television program instance selected by a user for recording to the storage device, wherein the content instance key is encrypted using a public key of the first set-top box;

retrieving an encrypted back-up copy of the content instance key encrypted at the first set-top box using a particular public key other than the public key of the first set-top box;

retrieving an encrypted copy of at least one access rights element defining a particular user's access rights to at least the television program instance, encrypted using the particular public key;

identifying a particular private key paired to the particular public key and retrieving the particular private key, wherein the particular private key is different from the private key paired to the public key of the first set-top box;

decrypting the encrypted back-up copy of the content instance key using the particular private key;

decrypting the encrypted copy of the at least one access rights element using the particular private key; and

decrypting at least a portion of the encrypted television program instance stored on the storage device using the decrypted back-up copy of the content instance key such that at least a portion of the encrypted content is available in the clear without utilizing the private key of the first set-top box;

wherein the first set-top box, when accessing content stored on the storage device, decrypts another encrypted copy of the content instance key, encrypted using the public key of the first set-top box, using the private key paired to the public key of the first set-top box, and the decrypted at least one access rights element is for use in verifying whether the user is allowed access to the decrypted portion of the encrypted television program instance.

2. The system of claim 1 wherein the first set-top box is a failed set-top box and the operations further comprise:

encrypting at least a portion of said television program instance on said storage device using a new content instance key; and

encrypting said new content instance key using a public key of other than said failed first set-top box.

3. The system of claim 2 , wherein the operations further comprise re-encrypting at least a portion of said decrypted television program instance with said new content instance key.

4. The system of claim 3 , wherein the operations further comprise re-encrypting said new content instance key with a public key associated with an operational set-top box.

5. The system of claim 3 , wherein the operations further comprise re-encrypting said new content instance key with a public key of a multiple systems operator (MSO)'s headend.

6. The system of claim 3 wherein said re-encrypted television program instance is re-recorded onto said storage device.

7. The system of claim 3 wherein said re-encrypted television program instance is re-recorded onto another different storage device.

8. The system of claim 2 , wherein the operations further comprise re-encrypting at least a portion of said decrypted television program instance with the new content instance key.

9. The system of claim 8 , wherein the operations further comprise encrypting said new content instance key with a public key of an operational set-top box.

10. The system of claim 8 , wherein the operations further comprise encrypting said new content instance key with a public key of a multiple systems operator (MSO)'s headend.

11. The system of claim 8 wherein said re-encrypted television program instance is re-recorded onto said storage device.

12. The system of claim 8 wherein said re-encrypted television program instance is re-recorded onto a second storage device.

13. A computer-implemented method comprising:

receiving, using at least one computing device, encrypted content from a storage device, the encrypted content including a television program instance encrypted at a first set-top box using a content instance key, the encrypted television program instance selected by a user for recording to the storage device, wherein the content instance key is encrypted using a public key of the first set-top box;

retrieving an encrypted back-up copy of the content instance key encrypted at the first set-top box using a particular public key other than the public key of the first set-top box;

retrieving an encrypted copy of at least one access rights element defining a particular user's access rights to at least the television program instance, encrypted using the particular public key;

identifying a particular private key paired to the particular public key, wherein the particular private key is different from the private key paired to the public key of the first set-top box;

retrieving the particular private key;

decrypting the encrypted back-up copy of the content instance key using the particular private key;

decrypting the encrypted copy of the at least one access rights element using the particular private key; and

decrypting at least a portion of the encrypted television program instance stored on the storage device using the decrypted back-up copy of the content instance key such that at least a portion of the encrypted content is available in the clear without utilizing the private key of the first set-top box;

wherein the first set-top box, when accessing content stored on the storage device, decrypts another encrypted copy of the content instance key, encrypted using the public key of the first set-top box, using the private key paired to the public key of the first set-top box, and the decrypted at least one access rights element is for use in verifying whether the user is allowed access to the decrypted portion of the encrypted television program instance.

14. The method of claim 13 , wherein the storage device is a first storage device, the method further comprising:

generating a new first content instance key and a new second content instance key;

transferring at least a portion of the encrypted television program instance from the first storage device to a second storage device; and

associating the new first and second content instance keys with the transferred portion of the encrypted television program instance.

15. The method of claim 14 , further comprising the steps of, prior to transferring the portion of the encrypted television program instance to the second storage device, encrypting the new first content instance key with a public key of a second set-top box.

16. The method of claim 14 , further comprising the step of:

decrypting the portion of the encrypted television program instance; and

re-encrypting the decrypted portion of the encrypted television program instance with the new first content instance key.

17. The method of claim 16 , further comprising the step of decrypting the re-encrypted portion of the encrypted television program instance at the second set-top box using a private key paired to the public key of the second set-top box.

18. The method of claim 14 , further comprising the steps of, prior to transferring the portion of the encrypted television program instance to the second storage device, encrypting the new second content instance key with a public key of a content transcription device.

19. The method of claim 15 , further comprising encrypting the new second content instance key with a public key of a content transcription device, the public key of the content transcription device different from the public key of the second set-top box.

20. The method of claim 13 , wherein the encrypted copy of the at least one access rights element is a copy of a first digital rights element defining first access rights to at least the television program instance for a particular user, and the storage device includes a second access rights element defining second access rights to at least the television program instance for the particular user, and the first access rights are different from the second access rights.