A client computing device comprising: at least one processor (902, 952); a non-transitory computer-readable medium storing executable instructions that when executed by the at least one processor are configured to implement: a media content handler configured to obtain media content, the media content associated with a license group; a group license manager configured to determine whether or not the media content is part of the license group, and when the media content is determined as part of the license group, the group license manager is configured to determine whether a master key for the license group was previously received, the group license manager configured to send, over a network, a license request to a license manager when the master key was not previously received, the license request including a content identifier identifying the media content and a group identifier identifying the license group that includes the media content, the group license manager configured to receive, over the network, a license to permit access to the media content, the license including the master key corresponding to the license group; a key generator (110, 130) configured to derive a content key specific to the media content identified by the content identifier based on the master key, wherein the content key is not stored on the client computing device, wherein the key generator (110,130) is configured to derive the content key using a key derivation function inputted with the master key, the content identifier, and the group identifier; and a decryption unit configured to decrypt the media content using the content key such that the media content can be accessed, wherein content keys for other media content that is part of the license group are configured to be derived at the client computing device based on the master key, a respective content identifier, and the group identifier using the key derivation function. at least one processor (902, 952); a non-transitory computer-readable medium storing executable instructions that when executed by the at least one processor are configured to implement: a media content handler configured to obtain media content, the media content associated with a license group; a group license manager configured to determine whether or not the media content is part of the license group, and when the media content is determined as part of the license group, the group license manager is configured to determine whether a master key for the license group was previously received, the group license manager configured to send, over a network, a license request to a license manager when the master key was not previously received, the license request including a content identifier identifying the media content and a group identifier identifying the license group that includes the media content, the group license manager configured to receive, over the network, a license to permit access to the media content, the license including the master key corresponding to the license group; a key generator (110, 130) configured to derive a content key specific to the media content identified by the content identifier based on the master key, wherein the content key is not stored on the client computing device, wherein the key generator (110,130) is configured to derive the content key using a key derivation function inputted with the master key, the content identifier, and the group identifier; and a decryption unit configured to decrypt the media content using the content key such that the media content can be accessed, wherein content keys for other media content that is part of the license group are configured to be derived at the client computing device based on the master key, a respective content identifier, and the group identifier using the key derivation function. a media content handler configured to obtain media content, the media content associated with a license group; a group license manager configured to determine whether or not the media content is part of the license group, and when the media content is determined as part of the license group, the group license manager is configured to determine whether a master key for the license group was previously received, the group license manager configured to send, over a network, a license request to a license manager when the master key was not previously received, the license request including a content identifier identifying the media content and a group identifier identifying the license group that includes the media content, the group license manager configured to receive, over the network, a license to permit access to the media content, the license including the master key corresponding to the license group; a key generator (110, 130) configured to derive a content key specific to the media content identified by the content identifier based on the master key, wherein the content key is not stored on the client computing device, wherein the key generator (110,130) is configured to derive the content key using a key derivation function inputted with the master key, the content identifier, and the group identifier; and a decryption unit configured to decrypt the media content using the content key such that the media content can be accessed, wherein content keys for other media content that is part of the license group are configured to be derived at the client computing device based on the master key, a respective content identifier, and the group identifier using the key derivation function.