A method of protecting media files includes dividing a media file into segments. Each segment is encrypted multiple times with a different encryption key each time. Downloads of the segments are controlled such that different combinations of segments and keys are downloaded. Key bundles are provided to user devices, with each key bundle is a combination of keys only for that user device combination of segments and keys.