Computer system and method for secure password reset of password protected devices

A computer device for enabling secure password reset functionality for a password protected device having a unique identifier, the computer device comprising:

• a memory configured to store instructions;
• and
• a processor coupled to the memory and configured to execute the instructions to cause the computer device to:
• generate a registration code for registering the password protected device with a service for enabling the secure password reset functionality, the registration code including at least the metadata associated with certain attributes of the password protected device and the unique identifier associated with the password protected device, wherein the metadata includes three or more of 1) a device type identifier of the password protected device, 2) a serial number of the password protected device, 3) a firmware version of the password protected device, and 4) a checksum to facilitate security of the registration code;
• send the registration code to a computer server associated with the service for enabling the secure password reset functionality, wherein the metadata and the unique identifier associated with the password protected device are stored in memory associated with the computer server for registering the password protected device with the service via the computer server;
• generate a request code for the password protected device upon user initiation of a password reset request for the password protected device, the request code including at least the metadata associated with certain attributes of the password protected device, and whereby the request code does not include the unique identifier;
• send the request code to the computer server, which is located remote from the first computer device;
• receive from the computer server, a first hash value for a first recovery string the first recovery string including at least the serial number, the checksum in the metadata, and the unique identifier associated with the identified-password protected device;
• generate a second hash value for a second recovery string including at least the serial number, the checksum in the metadata, and the unique identifier associated with the password protected device;
• and
• compare the first and second hash values to enable the secure password reset functionality for the password protected device if the first and second hash values match.

A computer-readable medium storing instructions executable by a processor to implement a method for enabling secure password reset functionality for a password protected device having a unique identifier, the method comprising:

• generating, in a first computer device operatively to coupled the password protected device, responsive to receiving a password reset request for the password protected device, a Request identifier (ID) for the password protected device and a request code for the password protected device, the request code including at least the Request ID and metadata associated with certain attributes of the password protected device, whereby the request code does not include the unique identifier associated with the password protected device;
• inputting the request code to a password reset computer device;
• receiving, from the password reset computer device, a first hash value for a first recovery string the first recovery string including at least the 1) the metadata, 2) the Request ID and 3) the unique identifier associated with the password protected device;
• generating, in the first computer device, a second recovery string and a second hash value for the second recovery string the second recovery string including at least the 1) the metadata, 2) the Request ID and 3) the unique identifier associated with the password protected device;
• comparing, in the first computer device, the first and second hash values to one another;
• and
• enabling password reset functionality for the password protected device by the first computer device contingent upon the compared-first hash value being determined to match the second hash value.