Abstract: A content management system includes a mobile station, a service provider, and a content distribution kiosk. A content encryption key is associated with the mobile station, and a copy of the key is provided to the mobile station. In providing content to the mobile station, the content is first encrypted with the content encryption key, and it is sent to the mobile station in its encrypted form. The mobile station keeps the content in memory in its encrypted form. To make use of the content, the mobile station decrypts the content for use, and deletes the decrypted content once it has been used. The content in its encrypted form remains in memory on the mobile station. Multiple mobile devices may use the same content encryption key, in which case the devices may exchange encrypted content using, for example, a Bluetooth connection. Content may also be retrieved from a content distribution kiosk.