of his privileges to the son step 452 the father now needs a public key for the son step 453 if the father has issued a certificate to the son before he may already have a public key for the son on file in his personal identification device or other storage location that he can retrieve and use accordingly step 456 if not a public private key pair is created for the son and the father stores the public key in a local database step 454 this database may reside anywhere that the primary user wishes to keep it the father then creates and signs the secondary certificate using his the father 39 s private key and provides it to the son step 457 he also provides the primary media content subscription service privilege certificate to the son step 458 these certificates may be stored in the son 39 s personal identification device or may be stored as part of the son 39 s user account in the father 39 s personal identification device in the example described above a father elects to bestow his hbo privileges on his son once the son has received his secondary certificate he is free to make use of the privileges as stipulated by his father this process is seen.