Abstract: A secure content receiver includes a processing unit operable to request a data file from a remote device, to provide a first encryption key to the remote device, and to receive the requested data file and a key object from the remote device. The received data file is encrypted using the first encryption key. The key object imposes restrictions on the decryption of the data file. The receiver further includes a first security module that is coupled to the processing unit and that is operable to decrypt the data file according to the restrictions imposed by the key object.

Abstract: A computer security system comprises a physical cryptographic device and a device controller. The device controller is adapted to generate a virtual cryptographic device from the physical cryptographic device to enable logical use of the physical cryptographic device via the virtual cryptographic device.

Abstract: Systems, methodologies, media, and other embodiments associated with cryptographic key maintenance and/or migration are described. One exemplary system embodiment includes a logic for performing cryptographic key maintenance and/or migration and an interface for operably connecting the system to a trusted platform.