A method of enabling roaming of a rights object stored in a device in a digital rights management, DRM, system, the method comprising: a device issuing disposable authentication information to a mobile device, said device storing information on the mobile device; the mobile device receiving said disposable authentication information and requesting an unauthorized device for a remote authentication; the unauthorized device executing the remote authentication request; the device receiving a corresponding remote authentication request from the unauthorized device, said corresponding remote authentication request comprising an identifier of the mobile device; the device checking if the identifier of the mobile device matches the stored information on the mobile device; if the identifier matches, the device transmitting a remote authentication query to the unauthorized device including the identifier of the mobile device; the unauthorized device sending the remote authentication query to the mobile device; the unauthorized device receiving a response to the remote authentication query via the mobile device and transmitting said response back to the device, said response being based on the disposable authentication information; based on said response, the device executing a remote authentication approval to the unauthorized device; the unauthorized device informing the mobile that it has received a remote authentication approval; the unauthorized device receiving a content object, and receiving a rights object acquired from a rights issuer by the device or a rights object that is newly created, said rights object being required to use said content object. a device issuing disposable authentication information to a mobile device, said device storing information on the mobile device; the mobile device receiving said disposable authentication information and requesting an unauthorized device for a remote authentication; the unauthorized device executing the remote authentication request; the device receiving a corresponding remote authentication request from the unauthorized device, said corresponding remote authentication request comprising an identifier of the mobile device; the device checking if the identifier of the mobile device matches the stored information on the mobile device; if the identifier matches, the device transmitting a remote authentication query to the unauthorized device including the identifier of the mobile device; the unauthorized device sending the remote authentication query to the mobile device; the unauthorized device receiving a response to the remote authentication query via the mobile device and transmitting said response back to the device, said response being based on the disposable authentication information; based on said response, the device executing a remote authentication approval to the unauthorized device; the unauthorized device informing the mobile that it has received a remote authentication approval; the unauthorized device receiving a content object, and receiving a rights object acquired from a rights issuer by the device or a rights object that is newly created, said rights object being required to use said content object.