The invention discloses a DRM controller, which comprises a client which communicates with a server and is installed on a mobile terminal, and a security device capable of communicating with the client. The DRM controller is characterized in that the client is connected to the security device via interfaces, and the security device is a key type device provided with a function of an IC (integrated circuit) card. By the method, resource requirement of hardware is lowered, performance bottleneck is eliminated, and convenience is brought to software update and maintenance. Meanwhile, by integrally combining a mobile payment card with a CMMB (China mobile multimedia broadcasting) card, existing infrastructure is fully utilized, seamless integration with mobile payment is realized, and accordingly, the DRM system based on the distributed key is convenient in implementation and use. Moreover, the security device can support online DRM system by the aid of low-cost communicator, so that uniformity of mobile network and Internet is realized, implementation and management cost is lowered greatly, and evident quality and price advantages are achieved.