Patent ID: 8214644

Claim:
A method of receiving, by a terminal, a rights object (RO) from a rights issuer (RI) on behalf of a memory card in the terminal, comprising: receiving, by the terminal and from the RI, a RO response message including a device ID, a signature and a protected RO including a wrapped key material, wherein the device ID indicates a memory card's ID, wherein the wrapped key material within the protected RO, which is included in the RO response message received from the RI, was encrypted by using a key of the memory card, and wherein the wrapped key material which was encrypted by using the key of the memory card comprises a MAC key and a RO Encryption key (REK); determining if the device ID in the RO response message matches the memory card's ID inserted in the terminal; if the device ID in the RO response message matches the memory card's ID which is different from the terminal's ID, extracting, by the terminal, from the protected RO, information to generate rights information to be stored on the memory card; generating a handle for identifying rights with respect to the rights information to be generated, wherein the handle is a random number and is unique within both the terminal and the memory card; transmitting, from the terminal to the memory card, a provisioning setup request message, including the wrapped key material, the handle and information about a size of the rights information; receiving, by the terminal from the memory card, a provisioning setup response message, the provisioning setup response message including a status indicating a result of processing the provisioning setup request message, and a verification key, wherein the verification key was obtained, by the memory card, from the wrapped key material; verifying the RO using the verification key; transmitting a rights provisioning request message from the terminal to the memory card for installing the rights information in the memory card, the rights provisioning request message including the rights information and the handle, wherein the handle is used to identify rights associated with the rights information stored in the memory card when the rights are to be consumed; and receiving, by the terminal from the memory card, a rights provisioning response message including a rights information installation status.