Method and device for providing access to encrypted content and generating a secure content package

A method is described of providing access to encrypted content to one of a plurality of consumer systems. Each consumer system may be able to obtain a secure content package, including the encrypted content and an indication of a location from which to request a rights data object, and further including at least one device having access to a thus obtained secure content package and provided with an agent function enabling it to retrieve a rights data object from a device issuing rights data objects from the indicated location. A rights issuer module may be transferred to a protected environment of a device for incorporation in the one consumer system, enabling the device, when operational in the consumer system, to generate at least one rights data object cryptographically bound to a requesting one of the devices in the consumer system provided with an agent function.