Patent ID: 8032764

Claim:
An electronic device comprising: a non-volatile store holding a plurality of encrypted sub-applications, and application-specific identifications to respectively identify the encrypted sub-applications, and at least one wrapper having a representation of code to call a function and supply a said application-specific identification to the called function to determine a storage location and access the storage location for contents and to call for decryption of an encrypted sub-application corresponding to the said application-specific identification in response to contents of the storage location as a content decryption key for the decryption; and a processor coupled to said non-volatile store and operable for: at a first time, performing an application for decrypting a first form of an encrypted key with a first key to provide a recovered key, wherein the encrypted sub-application has been encrypted using the recovered key; at a second time following the first time: encrypting the recovered key into a second form of an encrypted key using a key unique to the electronic device; and storing the second form in the storage location; and accessing the representation of code and executing the code so as to decrypt the encrypted sub-application in response to the second form; and circuitry for deleting from the electronic device the application for decrypting a first form and the first form of an encrypted key after the first time.