The growing demand for digital content using smart devices has taken the attenuation towards the enforcement of rights in digital content distribution. Digital rights management (DRM) systems support copyrights and try to control the access of digital content in a user-friendly way. However, user-friendly systems should also support user’s rights along with system requirements. The portable DRM architecture has the potential to support user’s rights. One of the critical challenges in portable DRM systems is the anonymous and secure delivery of digital content. To address this issue, a smart card-based content distribution framework is presented, which supports mutual authentication and secure session establishment. The security proof of the proposed scheme is presented in a random oracle model with rigorous informal security analysis, which signals that the proposed scheme has desirable attributes of security. Moreover, the security analysis is also performed using a widely adopted simulation tool, namely, “Automated Validation of Internet Security Protocol and Application (AVISPA)”. The study of performance has been conducted, which signals that the proposed scheme is also addressing the requirements of efficiency.