Secure print control and rights management system

A system and method for enforcing a usage control for a document, including: receiving an encrypted message, the encrypted message including a first key and a usage information authorization for the document, the encrypted message responsive to a second key to extract the first key and the usage information authorization; accepting an encrypted device datastream and securely decrypting the encrypted device datastream using the first key by a device, the device manager: generating a decrypted device datastream derived from the encrypted device datastream, transmitting the decrypted device datastream to the device without writing the decrypted device datastream to a user-accessible memory; and using the second key to access a datastore and to update a usage record for the document with the usage information authorization and a device status signal, the serializer providing the device manager with the print authorization signal when a device request is consistent with the usage record.