A multimedia content processing device, able to receive encrypted multimedia content from at least one transmitter managed by an operator, protected by a content protection system, and to provide the multimedia content in decrypted form to a user device, comprising means for implementing access control authorizing the provision of said decrypted multimedia content to said user device, means (10, 12, 14) for executing security services having a first associated level of security and means for executing services having an associated level of security lower than said first level of security, characterized in that it comprises: - a hypervisor able to control the execution of at least three groups of virtual machines (G1, G2, G3), said groups of virtual machines being executed in a strictly separate manner, including: - a first group of virtual machines dedicated to executing third-party application services with a level of security lower than the first level of security, installed by at least one user, said third-party application services being applications whose provision is controlled by at least one application provider, said at least one provider being independent from the operator, - a second group of virtual machines dedicated to the execution of services controlled by at least one operator, with a level of security lower than the first level of security, and - a third group of virtual machines able to implement security services of first level of security, comprising providing a decoding service to an access control service for the multimedia content, the user of the device being authorized to obtain decrypted multimedia content obtained from encrypted multimedia content provided by the operator under the control of a virtual machine from the third group able to provide said decoding service, the third group of virtual machines being also able to act as trusted third parties, guaranteeing sharing of available hardware resources for the execution of services of said first and second groups of virtual machines. - a hypervisor able to control the execution of at least three groups of virtual machines (G1, G2, G3), said groups of virtual machines being executed in a strictly separate manner, including: - a first group of virtual machines dedicated to executing third-party application services with a level of security lower than the first level of security, installed by at least one user, said third-party application services being applications whose provision is controlled by at least one application provider, said at least one provider being independent from the operator, - a second group of virtual machines dedicated to the execution of services controlled by at least one operator, with a level of security lower than the first level of security, and - a third group of virtual machines able to implement security services of first level of security, comprising providing a decoding service to an access control service for the multimedia content, the user of the device being authorized to obtain decrypted multimedia content obtained from encrypted multimedia content provided by the operator under the control of a virtual machine from the third group able to provide said decoding service,