A method comprising: selecting, by a processing device of a media server, a media item to be provided for user consumption via a satellite broadcast system; transmitting, by the media server, the media item encrypted using an encryption key to the satellite broadcast system via a first communication protocol; receiving, by the media server, a request from a user device for authorization to decrypt the encrypted media item obtained by the user device via a direct connection with the satellite broadcast system, wherein the request is received by the media server via a second communication protocol that is different from the first communication protocol; extracting, by the media server, a media identifier and geographic data of the user device from the request; determining, by the media server, whether the media identifier and the geographic data satisfy one or more criteria; determining, by the media server, whether the user device is authorized to decrypt the encrypted media item based on whether the media identifier and geographic data satisfy the one or more criteria; providing, by the media server to the satellite broadcast system, schedule data comprising a scheduled time slot for availability of the media item; causing, by the media server based on the schedule data, the media item to be available at the scheduled time period for download to the user device via the satellite broadcast system; and transmitting, by the media server and to the user device at the scheduled time slot, a key for decrypting the encrypted media item in response to the user device being authorized to decrypt the encrypted media item. selecting, by a processing device of a media server, a media item to be provided for user consumption via a satellite broadcast system; transmitting, by the media server, the media item encrypted using an encryption key to the satellite broadcast system via a first communication protocol; receiving, by the media server, a request from a user device for authorization to decrypt the encrypted media item obtained by the user device via a direct connection with the satellite broadcast system, wherein the request is received by the media server via a second communication protocol that is different from the first communication protocol; extracting, by the media server, a media identifier and geographic data of the user device from the request; determining, by the media server, whether the media identifier and the geographic data satisfy one or more criteria; determining, by the media server, whether the user device is authorized to decrypt the encrypted media item based on whether the media identifier and geographic data satisfy the one or more criteria; providing, by the media server to the satellite broadcast system, schedule data comprising a scheduled time slot for availability of the media item; causing, by the media server based on the schedule data, the media item to be available at the scheduled time period for download to the user device via the satellite broadcast system; and transmitting, by the media server and to the user device at the scheduled time slot, a key for decrypting the encrypted media item in response to the user device being authorized to decrypt the encrypted media item. <EOS>