Patent ID: 7634664

Claim:
A data-receiving device, comprising: a processing unit operable to request a data file from a remote device, to provide a first encryption key to the remote device, to receive the requested data file and a key object from the remote device, the received data file being encrypted using the first encryption key, the key object imposing restrictions on the decryption of the data file; a first trusted platform module (TPM) that is coupled to the processing unit and that is operable to decrypt the data file according to the restrictions imposed by the key object and to provide decrypted data to a playing unit operable to play the decrypted data; and a shield that protects modules coupled to the processing unit to prevent access to decrypted data, the shield encloses a light sensor, wherein if the light sensor senses light after the shield is breached, the shield clears private key data that is associated with the key object and stored in the first TPM so that the data file cannot be decrypted and the first TPM is inoperable until an authorized service provider re-enables the first TPM, wherein the key object is limited migratable, wherein after the data file is transferred from a first authorized receiver to a second device, the data file cannot be viewed by the first authorized receiver, preventing simultaneous playing of the data file on multiple devices.