Patent ID: 8661552

Claim:
A single-device system comprising: one or more computer-readable storage media hardware; computer-readable instructions on the one or more computer-readable storage media hardware which, responsive to execution by at least one processor, are configured to: provide a digital rights management (DRM) partition which, when created, comprises an empty operating environment that does not include DRM functionality and is to be provisioned with DRM software, including executable DRM software configured to acquire, manage, and enforce licenses associated with protected content; provide a hypervisor that is configured to: provide partitioning functionality on the system, including the DRM partition which is to be provisioned with the DRM software, wherein the DRM partition is configured to have all associated DRM functionality executing within the DRM partition remotely provisioned; and maintain isolation between partitions on the system; and wherein the DRM partition is further configured to generate an attestation request to a network-accessible individualization service to initiate a provisioning process in which it receives the DRM software, wherein the attestation request includes: an identification of the DRM partition; an identification of the single-device associated with the DRM partition; an identification of a version of an operating system running on the single-device; and an identification of the hypervisor that is running on the single-device.