WO2016010767A1

WO2016010767A1 - Improved secure content access system and method

Info

Publication number: WO2016010767A1
Application number: PCT/US2015/039295
Authority: WO
Inventors: Lee Douglas Shartzer; William Gibbens Redmann
Original assignee: Thomson Licensing SAS
Current assignee: Thomson Licensing SAS
Priority date: 2014-07-15
Filing date: 2015-07-07
Publication date: 2016-01-21
Anticipated expiration: 2017-01-15

Abstract

A method for managing content commences by entering an order, responsive to an end user input, for physical delivery of encrypted content stored on a tangible, machine-readable medium. Thereafter, in accordance with the order, a first decryption key is electronically received for decrypting the encrypted content for playback on a playback device linked to the order so the playback device can play the encrypted content after the physical delivery of the medium.

Description

IMPROVED SECURE CONTENT ACCESS SYSTEM AND METHOD

CROSS-REFERENCE TO RELATED APPLICATIONS This application claims priority under 35 U.S.C. § 1 19(e) to U.S. Provisional Patent

Application Serial No. 62/024,613, filed July 15, 2014, and U.S. Provisional Patent

Application Serial No. 62/087,849 filed December 5, 2014, the teachings of which are incorporated herein. TECHNICAL FIELD

This invention relates to a technique for managing secure access to content.

BACKGROUND ART

As video displays increase in capability, particularly in terms of increased resolution (e.g., 4K and 8K), as well as increased pixel quality (e.g., high dynamic range, extended color gamut, higher frame rate, 3D, etc.), the size of the corresponding incoming content for viewing on such displays to take advantage of such advanced capabilities has increased geometrically. Anticipated improvements in image compression technology likely will not adequately reduce the bandwidth requirements for transmission of such increased resolution content, taking into account the Internet communication capacity currently available at most homes. Further, assuming the ability of compression techniques to reduce the bandwidth of such content, the reduction in image quality will become significant, thus, largely undoing much of the quality improvement achieved by increasing the resolution and pixel quality of the incoming content.

Cable- and satellite-TV providers offer enormous numbers of channels over their networks, typically through a set-top box or the like. However, with the current bandwidth demand for standard and high-definition content over such networks, compression artifacts often appear. Moreover, the bandwidth of the delivery channels of such networks (whether optical fiber, coaxial cable, or satellite feed) presently has little, if any, excess capacity. Thus, allocating adequate bandwidth for content with increased resolution and/or other qualities would require dropping many of the channels cable and satellite-TV providers now offer. New "over-the-top" (OTT) services stream digital content over the Internet. Some OTT services, such as Apple TV and Roku, for example, make use of dedicated set-top boxes for connecting to a display device. Other services, sometimes referred to as smart TV applications (e.g., M-GO, Netflix, Hulu, and YouTube), rely on an embedded application in either a television set or in one or more other devices, such as tablets, smartphones, and personal computers. Most such services (e.g., iTunes, Roku, YouTube, and Hulu for example) use adaptive streaming techniques, wherein a system can react to dynamic bandwidth constraints by switching to a lower bandwidth and, accordingly, a lower fidelity version of the content. Such OTT systems remain constrained by the limited bandwidth of the Internet service in a typical household. Further, such OTT system must not only share bandwidth with other devices in a given household, but more broadly, they must also share the bandwidth capabilities of the Internet Service Provider (ISP) with other ISP subscribers. Thus, even if the available bandwidth appears adequate at the outset, ISPs can throttle back bandwidth unexpectedly, leaving the quality of the presentation to vary dramatically.

Other mechanisms for delivering digital content to the home include physical media, such as DVDs and Blu-Ray discs. Such physical media have the advantage of offering a predetermined bandwidth that typically remains essentially constant throughout the course of playback. However, such packaged media remains unsecured with respect use by a particular end user or playback on a particular piece of equipment. Thus, for example, different individuals can watch the same DVD or Blu-Ray disc on the same or different equipment without restriction. In that regard, the owner of the disc can lend it to others who can playback the disc play without issue on their equipment.

Some services allow download of digital content in advance of playout, rather than streaming as with the OTT services described. Examples of services that download content in advance include iTunes and Ultraviolet. Services that offer content delivery in advance typically provide an authorization code that allows the end user to obtain the necessary license/decryption key to playback content. Alternatively, such services can provide the license as a component of the purchase. Since these systems download or stream content before playout, they suffer from the bandwidth limitation of the Internet connection.

In some cases, a physical DVD or Blu-Ray disc can include a digital copy of a movie for downloading and playback on devices other than a disc player, e.g., a smartphone, tablet, or personal computer, for example. Digital Copy™ by Warner Bros. Entertainment, Inc. offers this feature. Other services, like Ultraviolet, provide an authorization code to the end user for acquiring a license to download such content. In other cases, the disc itself will have an embedded authorization code, allowing the playback device to acquire a license without the need for the end user to enter any data.

While such systems can provide adequate bandwidth for the richest digital content (e.g., 4K), these systems lack the ability to share content easily. The authorization code, whether printed on paper or embedded on the disc, typically has a limited number of uses (e.g., one or two), after which the copy becomes unusable by other users (e.g., your friends) and so no support exists for them to obtain a license for their personal use of the content.

Thus, a need exists for a technique for delivering content that overcomes the aforementioned disadvantages.

BRIEF SUMMARY

Briefly, in accordance with one aspect of the present principles, a method for content playback includes the step of electronically receiving, at a playback device, a decryption key for decrypting encrypted content stored on a non-transitory, tangible, machine-readable medium for playback by playback device. The decryption key is linked to an order entered in response to input from an end user for physical delivery of the encrypted content stored on the medium, thus allowing playback to occur after the physical delivery of the medium.

In accordance with another aspect of the present principles, a method for managing content commences by receiving an order for physical delivery of encrypted content on a tangible, machine-readable medium. Thereafter, a decryption key is electronically delivered to a first playback device linked to the order for decrypting the encrypted content so that the first playback device can play the encrypted content after the physical delivery of the medium.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 illustrates a block diagram of a typical prior art system for secure digital media delivery;

FIG. 2 illustrates a block diagram of an exemplary embodiment of a system for shipping media to a user's premise in accordance with an aspect of the present principles; FIG. 3 illustrates a block diagram of an exemplary embodiment of a system that produces physical media at a vending machine available to the end user in accordance with another aspect of the present principles;

FIG. 4 illustrates a flowchart of an exemplary process for providing access to secure content recorded on physical media in accordance with the present principles;

FIG. 5 illustrates a flowchart for another exemplary process for providing access to secured content on physical media in accordance with the present principles; and,

FIG. 6 illustrates an exemplary end user interface at different stages of the exemplary process of FIG. 4.

DETAILED DESCRIPTION

FIG. 1 illustrates a prior art secure content access system 100 that provides encrypted content to an end user for display. The system 100 comprises an encoder module 101 for providing secure content, as exemplified by secure content 102, and for providing a decryption key (not shown) for such content, the key being stored in a database 103 that also stores account information. An end user, typically at his or her premise, has a digital media module 121 for accessing the content 102 and a display 123 linked to the digital media module 121 for displaying the content. The display 123 could comprise a big screen monitor, for example in the user's den, in which case the digital media module 121 could take the form of a satellite- or cable-TV set-top box, or Internet-connected streaming "over-the-top" (OTT) box, connected to the display 123. Other variations of this configuration could include a DVD or Blu-Ray disc player or the like, having Internet-connected features, in place of or in addition to the digital media module 121.

The display 123 could take the form of a "smart" or "connected" television set having an Internet connection, in which case the digital media module 121 would take the form of an application that runs on such a television set, rather than a stand-alone device as depicted in FIG. 1. Similarly, other devices, such as for example, a tablet, smartphone, or personal computer (not shown) could integrate the functionality of both the digital media module 121 and the display 123. However, for the best viewing experience for 4K resolution and increased quality content, the display 123 should offer a both large viewing area and ultrahigh resolution, as well as other capabilities such as high dynamic range and extended color gamut. The digital media module 121 communicates through a network 1 10, typically comprising the Internet, with a content server 104 capable of accessing the secure content 102. Through its interactions with content server 104, the digital media module 121 can present to the end user an inventory of available content, as exemplified in FIG. 1 by the secure content 102. In some embodiments, the content server 104 can make use of filtering, recommendation engines, categories, hierarchies, search tools, parental controls, and the like, to present the end user with a subset of all available secure content 102. The end user can select the desired secure content 102 content from the presented inventory. The digital media module 121 accepts the end user's selection and interacts with the content server 104 and a license server 105, both interconnected with the database 103, to obtain the selected secure content from the content server 104 and to obtain a corresponding license from a license server 105. Generally, end users can obtain licenses if such end users have an account in a database 103, which account generally corresponds to a subscription or on-demand purchasing agreement as between a content provider and the user.

In some embodiments, an end user can obtain a license without having an account, merely by authorizing payment during the content request transaction. Under such circumstances, the database 103 will undertake a connection to at least one financial server (not shown) to debit the user's credit card or other payment mechanism, for example PayPal. After the end user obtains the necessary license, a license memory 122 in the digital media module 121 will record the license. The license itself could serve as a decryption key needed to decrypt the selected secure content 102. Alternatively, a decryption key could accompany the license now recorded in the license memory 122. Following acquisition of the license, the content server 104 allows the digital media module 121 to download or stream the selected secure content 102. With access to the selected secure content 102 and the corresponding license from the license server 105 stored in license memory 122, the digital media module 121 can decrypt the selected content for presentation on the display 123.

FIG. 2 illustrates an exemplary embodiment of an improved secure content access system 200 in accordance with an aspect of the present principles. The system 200 includes an encoder module 201 that produces high quality (e.g., high resolution) secure content 202. The encoder module 201 also produces corresponding content decryption keys for storage in a database 203. An end user at his or her premise has a digital media module 221 connected to a display 223. The end user will typically have a predetermined relationship with the digital media module (i.e., the digital media module resides at the end user's home.) However, the end user could make arrangements to designate another digital medial module as associated with that end user. The digital media module 221 communicates with a content server 204 through a network 210, which, at least in part, can comprise the Internet. Using the improved secure content access system 200, the end user can select the secure content 202 from the inventory presented by a content server 204, thereby placing an order for secure content 202. Here, the secure content 202 typically has a size too large for streaming in real-time by the content server 204 to the digital media module 221 because the secure content 202 has a minimum bandwidth requirement for p!ayout not achievable by the network connection between the content server 204 and the digital media module 221. Likewise, the secure content 202 typically has a size too large such that downloading of such content becomes impractical. Given the bandwidth of the network connection between content server 204 and digital media module 221 , such downloading would consume all or most of the user's household network bandwidth for several hours or days).

The improved secure content access system 200 further comprises a copy server 206, which can duplicate the secure content 202 onto a non-transitory, machine-readable tangible media capable of physical delivery, thereby creating a secure content distribution package 207. In practice, the secure content distribution package 207 will typically take the form of an optical disc, e.g., a DVD or Blu-ray disc, but could take other forms, such as a memory stick (e.g., "thumb drive") or a memory card (e.g., an SD card). The content server 204 accepts the selection of the secure content 202 from the user. With address information for the user, provided by the end user or obtained from the database 203 following account initialization by the user, the content server 204 directs the copy server 206 to replicate the secure content 202. In this way, the copy server 206 will produce a secure content distribution package 207 containing the secure content 202, as replicated in a tangible, machine readable form, which then undergoes packing in a shipping container (not shown) during a shipping operation 21 1. The system 200 then initiates delivery of the secure content distribution package 207 by arranging for a delivery service 212, e.g., the US Postal Service or a package delivery carrier like Federal Express, to pick up and deliver to the secure content distribution package, now identified by reference number 224. After delivery by service 212 to the end user, the digital media module 221 accepts the secure content distribution package 224 from the end user and the digital media module 221 will communicate such acceptance to the content server 204 and the license server 205, thereby obtaining access to the secure content 202 contained in the package 224. In some instances, during the initial transaction with content server 204, a license server 205 will deliver a license corresponding to secure content 202 to the digital media module 221. The digital media module 221 stores a copy of the license in a license memory 222. As discussed above, in some instances, the license itself will decrypt the secured content 202. In other instances, a decryption key will accompany the license. Delivery of the license need not occur contemporaneously with the content order. For example, delivery of the license (and a decryption key if accompanying the license) can occur after placing the order, either before or when the digital media module 221 signals acceptance of the secure content distribution package 224. For example, the digital media module 221 can obtain a license upon accepting the secure content 224, which license then undergoes storage in the license memory 222. The storage of the license in the license memory 222 will occur on the basis of original content order for the same digital media module 221. If same end user associated with a given digital media module 221 logs in again, the license memory 222 for that digital media module may need to either update the current license or obtain a new license depending on terms of the original license. For a new transaction associated with a different digital media module 221 (i.e., a digital multimedia module at a different premise), the license memory 222 associated with that device will typically download a new license. Once the secure content distribution package 224 and the corresponding license become available to digital media module 221 , the module can decrypt the secure content and provide the decrypted content to the display 223 for the enjoyment of the user. In this way, the digital media module 221 can provide content of a greater resolution and higher quality than content streamed or downloaded by the module.

In the illustrative embodiment, the digital multimedia module 221 can offer the end user the convenience of obtaining the appropriate license automatically on the basis of the original content selection. Alternatively, the digital multimedia module 221 can offer the end user a similar convenience by obtaining a license automatically upon accepting the secure content distribution package 224, though in some instances, the module can request the end user approve the transaction.

The license obtained in the manner described above could offer unlimited playback forever. Alternatively, the license could offer a limited number of playbacks and/or a limited interval. In this regard, the content server 204 and license server 205 could offer the end user different license options at different costs depending on how often and how long the end user desires to playback the secure content. F1G. 3 illustrates another exemplary embodiment 300 of an improved secure content access system of the present principles for providing an end user with high quality, high resolution content on a non-transitory, tangible, machine readable media. The system 300 of FIG. 3 includes an encoder module 301 that produces secure content 302. The encoder module 301 will also provide an access key corresponding to the secure content 302 for storage in a database 303. A first end user transacts with content server 304, for example through a first digital media module 321 over network 310 (which may comprise the Internet), to select and order the secure content 302 for replication at a selected vending machine 31 1. In response, the content server 304 will notify the first end user that the selected content vending machine 31 1 has or will have available secure content 307 comprising a copy of the secure content 302. The first end user will then interact with the content vending machine 31 1 to copy the secure content 307 onto a non-transitory, tangible machine-readable storage device 312, provided from an inventory in the content vending machine 31 1 or supplied by the first end user. Note that copying of the secure content 307 onto the portable storage device 312 could occur prior to the interaction between the first end user and the vending machine 31 1 if the machine provides the storage device. Once the copying has occurred, the portable storage device 312 becomes filled with content, thus becoming the filled portable storage device 324 that contains the secure content 325, which comprises a copy of the secure content 302. During the interaction between the vending machine 31 1 and the first end user, the machine provides the filled portable storage device 324 to the first end user.

In another embodiment, the content vending machine 31 1 may be stocked with portable storage devices that already contain copies of secure content 302, thus constituting filled portable storage devises 324. Such pre-loaded filled portable storage devices could be may be replicated at remote duplication facility (not shown) and then loaded into to the content vending machine 31 1.

The first end user can now load the filled portable storage device 324 into his or her first digital media module 321. Should the filled portable storage device 324 take the form of a memory stick, the first end user accomplishes such loading by plugging the filled portable storage device into an appropriate USB port (not shown) on the first digital media module 321 . After loading, the first digital media module 321 CC6SSCS the filled portable storage device 324 to read the secure content 325. In order to decrypt the secure content 325, the first digital media module 321 will interact with the content server 304 and/or license server 305 to retrieve a license (and any accompanying key) from the database 303 for storage in a license memory 322. This license-retrieval may occur at the time the first end user initially orders the desired secure content. Alternatively, the digital media module 321 can retrieve the necessary license after the first end user has loaded (e.g., attached) the filled portable storage device 324 or the module can retrieve the license as a separate transaction as described hereinafter. After retrieving the license, the first digital media module 321 can decrypt the secure content 325 to present the decrypted content on the display 323.

A first end user who has obtained the portable storage device 324 in the manner describe above can provide the device to a second end user (e.g., a friend or family member) who could then load it onto a second digital media module (not shown) similar to the first digital media module 321. Once loaded with the filled portable storage device 324, this second digital media module will attempt to read secure content 325. However, the second digital media module will likely not have had any transaction history with the content server 304 regarding the particular secure content loaded onto the filled portable storage device. Thus, the second digital media module will need to interact with the content and license servers 304 and 305.

Assuming that the second end user (or the second digital media module associated with that end user) has a valid account known to the database 303, then, the license server 305 will download a license for storage in the license memory associated with the second digital media module. This license (and any key accompanying the license) will enable the second digital media server to decrypt and present the content to the second user. Absent any information within the filled portable storage device 324 as to a paid-up license (described below), then the second user's account will incur a charge for the license.

Alternatively, the first end user who originally obtained the secure content could have purchased a paid-up license though his or her digital media module 321 or other device, for multiple users which would identify such users to enable identification of their corresponding digital media modules. Under such circumstances, the filled portable storage device 324 would indicate such a paid-up license when interacting with license server 305 which would provide a license at no cost to second user. Even though first end user purchased a paid-up license, the filled portable storage device 324 itself contains no license so the digital media module that loads such a storage device must seek a license to decrypt the content stored thereon. If the second end user has no account, then that end user will need to interact with the content server 304 and/or the license server 305 to obtain the needed license. As discussed above, different license choices could exist at different prices, depending on how often and how long a user seeks to playback the secure content.

In some embodiments, the content server 304 can communicate with the content vending machine 31 1 to determine a current inventory level, and if necessary, dynamically direct the vending machine to make further copies. In other embodiments, the content vending machine 31 1 could maintain a repository of secure content 307 representing a number of movies, and autonomously maintain its own inventory levels by producing new copies onto portable storage devices 312 as it vends existing copies.

FIG. 4 illustrates an improved secure content access method 400, which starts with step 401. During step 401 , a first end user, having an account with a system, (e.g., one of systems 200 and 300 of FIGS. 2 and 3, respectively, or a combined system having the delivery mechanisms of both), accesses a content server (e.g., one of servers 204 and 304). During step 402, a first end user places an order for content through a first digital media module (e.g., one of digital media modules 221 and 321 ) for selected secure content (one of selected secure content 202 and 302) for physical delivery to the first user during a physical delivery indication block 410.

During block 410, the first digital media module performs various steps described hereinafter to indicate the mode of physical delivery of the secure content to the first user. In conjunction with such steps, the content server (e.g., one of the content servers 204 and 304) arranges for such delivery. Preferably, the first digital delivery module performs step 401 , as well as step 402 and the steps associated with the block 410. In the alternative, another device, such as a computer, tablet computer, or smartphone (not shown) could perform such steps.

The steps performed in the block 410 can vary depending upon the delivery capabilities of the system (e.g., the systems 200 and 300), as well as the first end user's choices and preferences. FIG. 4 presumes that the system supports both the delivery service 212 of FIG. 2 and content vending machine 31 1 of FIG. 3 and that the first end user has no set preferences, which may, for example, identify a preferred (or undesired) delivery mode, or vending station location. In one exemplary embodiment, the physical delivery indication block 410 begins by determining whether the selected secure content capable of being provided by the vending machine 31 1. Typically, the content server will make that determination. If the vending machine 31 1 of FIG. 3 cannot provide the requested secure content, then during step 417, the content delivery system will arrange for shipping the secure content. Thus, as discussed with respect to FIG. 2, the system will prepare the shipment 21 1 and provide that shipment to the shipping service 212. Under such circumstances, the content delivery system will provide the first end user with details of the shipment during step 418, which concludes the physical delivery indication block 410.

If, during step 41 1, the content delivery system determines that the vending machine 31 1 can provide the selected secure content, then during step 412, the system determines whether the vending machine 31 1 can provide the secure content now. In practice, the content delivery system makes this determination in conjunction with the content server (e.g., the content server 304 of FIG. 3) and in some embodiments the determination will involve communicating with the content vending machine 3 1 1. If the content vending machine 31 1 can provide the secure content now. then the content delivery system 31 1 will notify the first end user of the location of the vending machine user during step 413. In some embodiments, this indication also reserves this secure content at the machine 31 1 for the first end user or otherwise marks an inventory item as being reserved, for example, in content server 304. If, during step 412, the content delivery system determines that the content vending machine 31 1 cannot immediately provide the secure content, then during at step 415, the vending machine will obtain the secure content for copying. During step 416, the content delivery system provides an indication to the first end user regarding when the selected secure content will become available. Processing continues from here to step 413, during which the content delivery system provides the location of the content vending machine 31 1. The first end user will then interact with the vending machine 31 1 in the manner described so the vending machine can provide the selected secure content during step 414, which can include the copying of the secure content 307 to a user-supplied portable storage device 312 to produce the filled portable storage device 324, thereby completing the physical delivery indication block 410.

Once the first end user obtains physical delivery of the secure content from either the delivery service 212 or from vending machine 31 1 , then during step 420, the first end user will load that content into the first digital media module (e.g., one of digital media modules 221 and 321 of FIGS. 2 and 3, respectively) for acceptance. In one embodiment, the license server (e.g., one of the license servers 205 and 305) will supply the needed license to the digital media module during step 421 based on the order placed in step 402 and in response to the content being accepted at step 420. In other embodiments, step 421 can occur any time after step 402. During step 422, the first digital media module will decrypt the secure content and present the decrypted content for display, after which the process ends during step 423.

FIG. 5 illustrates an improved secure content access process 500, which commences upon step 501 at which time an end user has already obtained the secure content. The end user described with respect to the process 500 could comprise the first end user following deliver of the content in the manner described in connection with the physical delivery indication block 410. The end user could comprise a second user who has borrowed the secure content from a friend. Alternatively, the end user could be an individual who has interacted with the content vending machine 3 1 1 of FIG, 3 to obtain a portable storage device 324 with secure content 325, but has not previously interacted with the content server 304 to secure a license (and accompanying decryption key, if needed). Thus, as of step 501 , the end user has already obtained the secure content but this user's digital media module has not yet accepted the secure content and arranged for the needed license. During step 520, the user's digital media module accepts the secure content. Based on the identity of the secure content, the digital media module interacts with the content server and license server at step 521 to obtain a license comprising the key corresponding to the secure content. Once obtained, the license gets stored in the license memory. In some embodiments, the execution of step 521 will involve accessing the account in database (e.g., one of the account databases 203 and 303 of FIGS. 2 and 3 respectively) corresponding to either the end user or the digital media module associated with that end user. In this regard, the end user's digital media module will designate itself (as well as the end user associated therewith) in connection with the license acquisition. Having thus obtained the necessary key, at step 522 the digital media module can decrypt the secure content and present it on the attached display, e.g., 223, 323.

FIG. 6 illustrates two exemplary end user interfaces 600 and 650 for presentation to an end user on a display 623 (corresponding to one of the displays 223 and 323 of FIGS. 2 and 3, respectively). The first interface 600 illustrates secure content selection dialog 601 as potentially employed during the secure content selection step 402 of FIG. 4. The user interface 600 includes a Notice 602 indicating the availability of a high quality version of a movie 603, represented in FIG. 6 as movie poster art, but which might take other forms, e.g., a text description or a movie trailer. In some embodiments, the user interface can include a statement 607 indicating the basis for recommending or proposing the particular movie 603. The dialog 601 can include an offer 604, along with a mechanism, in the form of yes/no buttons 605 and 606, respectively, to enable the end user to select or reject the offered movie

603.

The second interface 650, illustrates shipping information 651 as might be presented to shipping details generated during step 418 of FIG. 4. The shipping details 652 in this example identifies the shipping service 212 of FIG. 2 transporting the secure content distribution package 224 of FIG. 2 and the expect delivery date. In some embodiments, the interface 650 can include information 653 about the corresponding license, whether or not already delivered to digital media module to indicate the beginning of the validity date, number of times playable (not shown), expiration date (not shown), etc.

The foregoing describes a technique for delivering high quality content to a user in a secure manner. As may be appreciated by those skilled in the art, the licensing and/or playback of content can readily occur on different machines. Especially in the case of utilizing a vending machine where the vending machine itself could perform the interaction with a content server.

Claims

1 1. A method for managing content, comprising:

2 electronically receiving, at a playback device, a decryption key for decrypting

3 encrypted content stored on a non-transitory, tangible, machine-readable medium for playback by the playback device, the decryption key linked to an order entered responsive to input from an end user for physical delivery of the encrypted content stored on the medium; the playback occurring after the physical delivery of the medium.

2. The method of claim 1 wherein the playback device enters the order for physical delivery of the encrypted content stored on the medium.

3. The method of claim 1 wherein the playback device is designated by the user.

4. The method of claim 1 wherein the user has a predetermined relationship with the playback device.

5. The method according to claim 1 wherein the decryption key is embodied within a content license.

1 6. The method according to ciaim 1 wherein the decryption key is received

together with a content license.

1

1 7. The method according to claim 1 further including the steps of: accepting, from the end user, a preferred mode of physical delivery.

1

1 8. The method according to claim 1 further including the steps of: providing, to the end user, an indication of the mode of physical delivery.

I

1 9. The method of claim 1 wherein the first decryption key is valid for at least one of a limited number of playbacks and playback during a limited interval of time.

10. A method for managing content, comprising:

electronically delivering to a playback device, responsive to an order from a user for physical delivery of encrypted content stored on a tangible, machine readable medium, a decryption key associated with the order for decrypting the encrypted content on the medium when loaded into the playback device for playback after the physical delivery of the medium.

1 1. The method according to claim 10 wherein the order is received from the user via the playback device.

12. The method according to claim 10 further including the steps of:

electronically delivering, responsive to a second order, a second decryption key for decrypting the encrypted content stored on the medium for playback by a second playback device.

13. The method of claim 12 wherein the second order is received from the second playback device.

14. The method of claim 13 wherein the second playback device is designated in the second order.

15. The method of claim 12 wherein the second order originates from the first playback device.

16 Apparatus for content playback, comprising:

a memory for electronically receiving a decryption key, the decryption key for decrypting encrypted content stored on a non-transitory, tangible, machine-readable medium; the decryption key linked to an order entered responsive to input from an end user for physical delivery of the encrypted content stored on the medium; and

a playback device coupled to the memory for loading content from the medium for decryption and playback by playback device, the playback occurring after the physical delivery of the medium.

17. The apparatus according to claim 16 wherein the playback device comprises a smart television.

18. The apparatus according to claim 16 wherein the playback device comprises a set-top box.

19. The apparatus according to claim 16 wherein the playback device includes one of a computer or tablet via which a user can request a decryption key.

20. Apparatus for secure content delivery, comprising:

an encoder for encrypting content;

a copy device for copying the encrypted content onto a non-transitory, tangible machine readable medium for physical delivery to a user in response to an order for such secure content; and

a server for delivering a decryption key to a playback device associated with the order, the decryption key for decrypting the encrypted content on the medium when loaded into the playback device for playback after the physical delivery of the medium.