Temporary enablement of functionality of a secure device

A secure device comprising:

• a memory configured to store a plurality of programmable instructions;
• and
• at least one processing device in communication with the memory, wherein the at least one processing device, upon execution of the plurality of programmable instructions is configured to:
• store public keys for respective trusted devices of at least one trusted device;
• store device-unique data that is unique for a secure device;
• generate a unique hashed-based message authentication code (HMAC) key;
• compute, by the processing device of the secure device based on the HMAC key and the device-unique data, a unique HMAC;
• transmit the unique HMAC to a trusted device of the at least one trusted device;
• receive a signed HMAC from the trusted device, wherein the signed HMAC is the unique HMAC as signed by the trusted device using a private key of the trusted device;
• decrypt the signed HMAC using the public key for the trusted device;
• recompute, by the processing device of the secure device, the unique HMAC based on the HMAC key and the device-unique data;
• verify that the signed HMAC corresponds to the unique HMAC transmitted to the trusted device by the processing device by comparing the decrypted signed HMAC to the recomputed unique HMAC to determine that the signed HMAC includes the unique HMAC previously computed by the processing device based on the unique HMAC key and the device-unique data;
• and
• enable functionality of the secure device based on a result of the comparison.

A non-transitory computer readable storage medium and one or more computer programs stored therein, the computer programs comprising instructions, which when executed by a computer system, cause the computer system to:

• store public keys for respective trusted devices of at least one trusted device;
• store device-unique data that is unique for a secure device;
• generate a unique hashed-based message authentication code (HMAC) key;
• compute, by the computer system and based on the HMAC key and the device-unique data, a unique HMAC;
• transmit the unique HMAC to a trusted device of the at least one trusted device;
• receive a signed HMAC from the trusted device, wherein the signed HMAC is the unique HMAC as signed by the trusted device using a private key of the trusted device;
• decrypt the signed HMAC using the public key for the trusted device;
• recompute, by the computer system, the unique HMAC based on the HMAC key and the device-unique data;
• verify that the signed HMAC corresponds to the unique HMAC by comparing the decrypted signed HMAC to the unique HMAC to determine whether the decrypted signed HMAC includes the unique HMAC previously computed by the computer system based on the unique HMAC key and the device-unique data;
• and
• enable functionality of the secure device based on a result of the comparison.