Ensuring authenticity in a closed content distribution system

1. A method comprising:

receiving encrypted content at a secure processor in a closed content distribution system, the secure processor comprising secure memory secured against inspection and intrusion outside the secure processor, having at least some secure individualized information maintained therein, the secure processor being capable of interpreting the encrypted content for presentation, the secure processor maintaining executive control capable of preventing the individualized information from being disclosed outside the secure memory;

receiving, at a first time, a dynamic conditional license for the encrypted content at the secure processor, the dynamic conditional license including a first decryption key for the encrypted content and information sufficient to verify that one or more signatures of chunks of data represented in decrypted content represented by the encrypted content is authentic at the secure processor, the dynamic conditional license facilitating access to the encrypted content based on dynamic modification of rights to the encrypted content at the first time, and the dynamic conditional license facilitating the access to the encrypted content after the first time and before occurrence of a specified usage condition related to usage of the encrypted content;

verifying at the secure processor authenticity of the decrypted content, using the information sufficient to verify that the decrypted content is authentic, wherein verifying the authenticity of the decrypted content comprises verifying that the one or more signatures of the chunks of data represented in the decrypted content are valid;

generating a second decryption key at the secure processor, in response to verifying the authenticity of the decrypted content at the secure processor, the second decryption key being independent of the first decryption key;

storing the second decryption key in the secure memory of the secure processor so as to secure the second decryption key against discovery outside the secure processor;

re-encrypting the decrypted content at the secure processor using the second decryption key, to provide re-encrypted content based on the re-encryption.

2. The method of claim 1 , further comprising receiving the encrypted content in portions, wherein a signature is associated with each portion.

3. The method of claim 1 , further comprising delivering physical media having information readable therefrom.

4. The method of claim 1 , further comprising enforcing re-encrypting the content with security software before using the secure processor to interpret the content.

5. The method of claim 1 , wherein verifying that the decrypted content is authentic occurs before storing the second decryption key in the secure memory.

6. The method of claim 1 , further comprising maintaining at least a portion of a result of the re-encrypting the decrypted content secure against discovery outside the secure processor.

7. The method of claim 1 , further comprising decrypting the encrypted content using the first decryption key.

8. The method of claim 1 , further comprising decrypting the re-encrypted content using the second decryption key and consuming the re-encrypted content.

9. The method of claim 1 , further comprising:

storing the re-encrypted content;

maintaining an association between the re-encrypted content and the second decryption key outside of the secure memory.

10. The method of claim 1 , further comprising:

retrieving the re-encrypted content from external storage;

retrieving an association between the re-encrypted content and the second decryption key;

decrypting the re-encrypted content with the second decryption key.

11. The method of claim 1 , wherein received content is determined to be the re-encrypted content, further comprising:

storing the re-encrypted content without generating a third decryption key and without re-encrypting the decrypted content again;

maintaining, outside of the secure memory, an association between the second decryption key and the re-encrypted content.

12. The method of claim 1 , further comprising disposing of at least portions of the decrypted content that are not determined to be authentic.

13. A method comprising:

receiving streaming content that has been encrypted into encrypted portions;

receiving, at a first time, a dynamic conditional license for the streaming content, the dynamic conditional license including a first key that can be used to decrypt one or more of the encrypted portions and a signature that can be used to verify the one or more encrypted portions are authentic, the dynamic conditional license facilitating access to the streaming content based on dynamic modification of rights to the encrypted content at the first time, and the dynamic conditional license facilitating the access to the streaming content after the first time and before occurrence of a specified usage condition related to usage of the streaming content;

decrypting the one or more encrypted portions using the first key;

verifying authenticity of the one or more encrypted portions at a secure processor, the secure processor comprising secure memory secured against inspection and intrusion outside the secure processor, and the secure processor maintaining executive control capable of preventing data in the secure memory from being disclosed outside the secure memory, wherein verifying authenticity of the one or more encrypted portions comprises verifying that one or more signatures of the encrypted portions are valid;

generating a second key within the secure processor, in response to verifying the authenticity of the one or more encrypted portions at the secure processor;

re-encrypting the one or more encrypted portions, using the second key;

if the one or more encrypted portions are authenticated:

storing the second key in secure memory of the secure processor without having stored the second key in memory other than the secure memory from a time the second key was generated, for future decryption of the one or more encrypted portions;

decrypting the one or more encrypted portions using the second key that is stored in the secure memory;

presenting the one or more encrypted portions;

wherein the second key is not stored if the one or more encrypted portions are not authenticated.

14. The method of claim 13 , wherein the signature is associated with each of the one or more encrypted portions.

15. The method of claim 13 , further comprising prohibiting sending of the second key outside of the secure processor.

16. The method of claim 13 , wherein the content is first content, further comprising:

receiving second content;

verifying one or more signatures of chunks of the second content for authenticity;

determining chunks of the second content are not authentic;

disposing of the second content.

17. The method of claim 13 , further comprising:

receiving the re-encrypted content at a later time;

storing the re-encrypted content without re-encrypting the re-encrypted content;

maintaining an association between the second key and the re-encrypted content outside of the secure processor.

18. The method of claim 13 , further comprising:

retrieving the re-encrypted content from outside of the secure processor;

retrieving an association between the re-encrypted content and the second key from outside of the secure processor;

decrypting the re-encrypted content inside the secure processor using the second key;

consuming the content within the secure processor.

19. The method of claim 13 , wherein the method is executed in a game device.

20. The method of claim 19 , wherein the streaming content is received over a Local Area Network (LAN) coupled to the game device.