A method and system to distribute encrypted content via a network commences when
a content provider generates a set of session keys and encrypts content with the
set of session keys. The content provider communicates the set of session keys
to a content distributor, which generates a set of encrypted session keys by encrypting
the set of session keys with a user key. The content distributor transmits the
encrypted content and the encrypted session keys to a content destination. The
content distributor also transmits the user key to the content destination, allowing
the content destination to decrypt the set of session keys with the user key, and
thereby use the set of decrypted session keys to decrypt the content. In a further
embodiment of the invention, the session keys are a time-varying sequence of session keys.