Trusted remote attestation agent (traa)

A method for use with a consumer electronic device and a service provider, the method comprising:

• determining whether a SIM card is present on the consumer electronic device;
• determining whether a data in a secure element of the consumer electronic device has changed;
• determining, if the SIM card is present, whether a network connection to the service provider is available;
• and
• enforcing a predetermined restriction on the consumer electronic device if either the SIM card is not present or the data in the secure element has changed and there is no confirmation from the service provider through the network connection.

A computer program product comprising a computer readable medium having computer readable code for instructing a processor of a device to perform a method, the method comprising:

• self-verifying integrity of the computer readable code;
• checking for presence of a provisioning SIM card present when the device is provisioned with a financial instrument;
• checking for connectivity to a financial service provider (FSP);
• checking for connectivity to a trusted service manager (TSM) via a home mobile network;
• if the self-verifying fails, putting a financial instrument on the device in a lock state so that the financial instrument is required to be re-enabled by calling the service provider;
• if a SIM card is determined present, verifying whether the SIM card matches the provisioning SIM card;
• if the verification of the provisioning SIM card fails, putting the financial instrument in a hold state so that the financial instrument will become available for use once the provisioning SIM card is again present in the device;
• and
• if checking for connectivity to the FSP fails and checking for connectivity to the TSM fails, putting the financial instrument in a cap state, wherein financial transactions for more than a predetermined cap value are denied to the device.