Device for generating an encrypted key and method for providing an encrypted key to a receiver

A device (100) for generating an encrypted master key. The device (100) comprises at least one input interface configured to receive a receiver identifier (STB i ), a service provider identifier (Id(k)) and a master key (Km j,k ) for the service provider; a memory configured to store a secret of the device; a processor configured to: process the receiver identifier using the secret to obtain a root key (Kr i ), process the service provider identifier using the root key to obtain a top key (Kt i,k ) and process the master key using the top key to obtain an encrypted master key (W(i,k)); and an output interface configured to output the encrypted master key. Also provided is a method for providing an encrypted master key to a receiver. An advantage is that the device can enable a new service provider to provide services to a receiver using an already deployed smartcard.