Patent ID: 8538890

Claim:
A client device, for enforcing digital rights management rules, the client device comprising: a set of processors; and a non-transitory computer-readable storage medium comprises instructions that when executed, causes the processor to perform the steps of: receiving a global-key (GK) encrypted unit key data (UKD), which includes a GK-encrypted unique cryptographic entity (UCE) and a GK-encrypted unit key number (UKN) from a key generation facility (KGF); decrypting the GK-encrypted UKD using a global key (GK) to determine a decrypted UCE and a decrypted UKN; encrypting the decrypted UKN and the decrypted UCE using a device unique key (DUK); creating a DUK-encrypted UKN and a DUK-encrypted UCE, wherein the DUK-encrypted UKN is a different value from the GK-encrypted UKN; forming the DUK-encrypted UCE to the DUK-encrypted UKN to form a DUK-encrypted UKD; storing the DUK-encrypted UKD in a memory; determining that a digital rights management (DRM) value is not equal to the GK-encrypted UKN; and based on that determination, performing the steps of: verifying the DUK-encrypted value was generated and stored; decrypting the DUK-encrypted UKD; and using the UCE as a cryptographic identity of the client device.