Patent ID: 8925096

Claim:
A method for targeting a user domain rights object (RO) to a secure content exchange (SCE)-conformant digital rights management (DRM) agent, comprising: in one of a rights issuer (RI) device or a local rights manager (LRM) device, validating that the SCE-conformant DRM Agent is in a user domain by receiving an attribute certificate from a domain enforcement agent (DEA), wherein the attribute certificate contains information proving that the SCE-conformant DRM agent is in the user domain wherein the attribute certificate identifies the user domain and the one of the RI device or the LRM device, and wherein the one of the RI device or the LRM device is not granted access to a user domain key and the information does not include the user domain key to facilitate maintaining security with regard to the user domain key; and targeting the user domain RO to the SCE-conformant DRM agent by generating a targeted user domain RO for initial use solely by the SCE-conformant DRM Agent.