Patent ID: 8712045

Claim:
A method comprising: encrypting, by a licensing server, using a public key of a public/private key pair and an asymmetric-key algorithm, a root license that includes a root key; encrypting, using the root key and a first symmetric-key algorithm, a media-stream license that includes a symmetric media-stream key; encrypting, using the symmetric media-stream key and a second symmetric-key algorithm, a leaf license that includes a content key, the leaf license provided in-band with content provided to a computing device; providing, by the licensing server and prior to providing content encrypted with the content key, the root license, the media-stream license, and the leaf license, the providing effective to enable the computing device having a private key of the public/private key pair and the content encrypted with the content key to decrypt the content; repeating the act of encrypting the root license after a first period, repeating the act of encrypting the media-stream license after a second period, and repeating the act of encrypting the leaf license after a third period, the first period longer than the second period, the second period longer than the third period; and limiting a loss of the decrypted content due to a single cryptographic compromise of one of the root license, the media-stream license, or the leaf license, the loss limited to an amount of the decrypted content lasting two times the second period.