Many ways to accomplish this. The reader needs to be granted a unique decrypt key upon purchase. The publisher might produce the key and payload (encrypted book) for each user at payment time. Or via some other flow. Lots of room for implementation.