Consumer electronic device comprising: processor in a housing (14, 14A) controlling a display and communicating with the Internet through a network interface (30, 30A); the processor executing logic including: periodically contacting a management server; sending to the management server a unique CE device ID in a secure transaction, without requiring key encryption by the processor; receiving from the management server a user token along with one or more service lists each of which contains a list of network addresses of approved content servers; presenting the one or more service lists on the display for selection of a content server thereon; responsive to user input indicating selection of a content server on the one or more service lists, uploading, through the network interface, the user token to the content server selected by the user; receiving from the content server selected by the user a content list of content available for selection by the CE device; responsive to user input indicating selection of a piece of content on the content list, sending a signal representative thereof to the content server selected by the user; and responsive to receiving the piece of content from the content server selected by the user, playing or making available for presentation on the display the piece of content, wherein neither the content list nor service lists can be modified by the CE device. processor in a housing (14, 14A) controlling a display and communicating with the Internet through a network interface (30, 30A); the processor executing logic including: periodically contacting a management server; sending to the management server a unique CE device ID in a secure transaction, without requiring key encryption by the processor; receiving from the management server a user token along with one or more service lists each of which contains a list of network addresses of approved content servers; presenting the one or more service lists on the display for selection of a content server thereon; responsive to user input indicating selection of a content server on the one or more service lists, uploading, through the network interface, the user token to the content server selected by the user; receiving from the content server selected by the user a content list of content available for selection by the CE device; responsive to user input indicating selection of a piece of content on the content list, sending a signal representative thereof to the content server selected by the user; and responsive to receiving the piece of content from the content server selected by the user, playing or making available for presentation on the display the piece of content, wherein neither the content list nor service lists can be modified by the CE device. periodically contacting a management server; sending to the management server a unique CE device ID in a secure transaction, without requiring key encryption by the processor; receiving from the management server a user token along with one or more service lists each of which contains a list of network addresses of approved content servers; presenting the one or more service lists on the display for selection of a content server thereon; responsive to user input indicating selection of a content server on the one or more service lists, uploading, through the network interface, the user token to the content server selected by the user; receiving from the content server selected by the user a content list of content available for selection by the CE device; responsive to user input indicating selection of a piece of content on the content list, sending a signal representative thereof to the content server selected by the user; and responsive to receiving the piece of content from the content server selected by the user, playing or making available for presentation on the display the piece of content, wherein neither the content list nor service lists can be modified by the CE device.