module without trust requirements on that entity or the systems it operates there is no risk of disclosing content or content provider keys to the administration entity even if the administration entity misuses or communicates its own keys to unauthorized entities as a result it is difficult for any third party to discover what the on device content provider secret is even when collaborating with other third parties the content provider can leverage its one device secret or key to further secure end to end all its communications with the card in both directions the invention can be applied to securely load and manage content on a security module such as public key infrastructure pki key material private keys etc from a certification authority ca to a security module symmetric key material from a one time password otp facility to a security module biometric data or private identity attributes from an identity management system idms to a security module private medical data from a health care provider digital rights from a content provider and electronic money credit values or other privileges from a bank to a security module the control key establishment protocol and further protected content delivery may be operated in multiple arrangements for example secure real time delivery of a content provider control key to a smart card through a content delivery provider may be achieved when the content provider does not have access to the card off line secure content delivery of a content provider control key to a security module may be achieved by use of e mails sent to a cardholder which the cardholder then locally pushes to his smart card fig1 illustrates a system of the invention.