Remote resetting to factory default settings; a method and a device

A device comprising an electric circuit adapted to carry out a remotely-initiated factory default reset of the device and a secure processing and storage environment, SPSE, the SPSE being configured for communicating with at least one remote unit via a network, and for communicating with the electric circuit via a communication channel,

• wherein the SPSE includes circuitry configured to:
• receive a current request to reset the device to factory default settings and a challenge associated with the current request, wherein the current request and the challenge are received via the network;
• after receiving the current request, initiate a reset to factory default settings of the device by communicating with the electric circuit via the communication channel;
• determine a response to the challenge through a function stored in the SPSE, wherein the response to the challenge is associated with the current request;
• check that the factory default reset has been carried out;
• and
• send a confirmation via the network, wherein the confirmation includes the response to the challenge as produced by the SPSE and an attestation report, the attestation report being a declaration by the SPSE that the SPSE has checked that the factory default reset has been carried out.

A method for securely initiating and confirming remote resetting of a device to factory default settings, the device comprising an electric circuit adapted to carry out the factory default reset and a secure processing and storage environment, SPSE, the SPSE being configured for communicating with at least one remote unit via a network, and for communicating with the electric circuit via a communication channel, the method comprising:

• receiving, at the SPSE of the device, a current request originating remote from the unit to reset the device to factory default settings and a challenge associated with the current request, wherein the current request and the challenge are received via the network;
• after receiving the current request, initiating, by the SPSE of the device, a reset to factory default settings of the device by communicating with the electric circuit via the communication channel;
• determining a response to the challenge through a function stored in the SPSE of the device, wherein the response to the challenge is associated with the current request;
• checking by the SPSE of the device, that the factory default reset has been carried out;
• sending, by the SPSE of the device, a confirmation via the network to the remote unit, wherein the confirmation includes the response to the challenge as produced by the SPSE and an attestation report, the attestation report being a declaration by the SPSE that the SPSE has checked that the factory default reset has been carried out;
• and
• in response to a verification that no confirmation report is received by the remote unit or the response to the challenge is incorrect, indicating that the device may be corrupted by an attacker.