Enhanced shared secret provisioning protocol

A system capable of securely registering a device, comprising:

• a server supporting a first part of a registration process;
• a network device supporting a second part of a registration process;
• a communications link coupling said server to said network device;
• a pair of registration triggers, said server and said network device each supporting one of said pair of registration triggers, wherein activation of said pair of registration triggers within a predetermined time interval launches said first and second parts of the registration processes, which then communicate with each other through said communications link;
• a set of registration data exchanged between said server and said network device over said communications link after the launching of said first and second parts of the registration process;
• a cryptographic secret formed at at least one of said server and said network device and shared between said server and said network device, thereby facilitating authentic communications between said server and said network device;
• a database that stores said registration data and said cryptographic secret;
• and
• a monitoring system that detects a registration signal that might emanate from a third device, whereby detection of any said registration signal from said third device prevents registration of said network device as part of said registration process.