A method of provisioning features in a device comprising: a feature control server: participating (82,83) in a key agreement with the device including receiving an ephemeral public key (Q FCie) encrypting a control instruction (FEAT n, CMD n) for controlling the device using a shared key (KEY ij ') established in the key agreement; generating (64; 88) a signature (SIG FCSj) using the control instruction and information provided by the device, the information comprising an identifier (UID i) associated with the device derived from at least a portion of a public key of a static key pair (d FCis, Q FCis); generating (65; 90) a message (M n) comprising the encrypted control instruction and the signature; and sending said message to a feature controller of said device; and the feature controller of the device: receiving from the feature control server, the message comprising the encrypted control instruction for controlling the device and the signature, the signature having been generated using the control instruction and information provided by the device, the information provided by the device comprising an identifier associated with the device; decrypting the encrypted control instruction to obtain the control instruction; verifying the signature; and if the signature is verified, executing the control instruction. a feature control server: participating (82,83) in a key agreement with the device including receiving an ephemeral public key (Q FCie) encrypting a control instruction (FEAT n, CMD n) for controlling the device using a shared key (KEY ij ') established in the key agreement; generating (64; 88) a signature (SIG FCSj) using the control instruction and information provided by the device, the information comprising an identifier (UID i) associated with the device derived from at least a portion of a public key of a static key pair (d FCis, Q FCis); generating (65; 90) a message (M n) comprising the encrypted control instruction and the signature; and sending said message to a feature controller of said device; and the feature controller of the device: receiving from the feature control server, the message comprising the encrypted control instruction for controlling the device and the signature, the signature having been generated using the control instruction and information provided by the device, the information provided by the device comprising an identifier associated with the device; decrypting the encrypted control instruction to obtain the control instruction; verifying the signature; and if the signature is verified, executing the control instruction. participating (82,83) in a key agreement with the device including receiving an ephemeral public key (Q FCie) encrypting a control instruction (FEAT n, CMD n) for controlling the device using a shared key (KEY ij ') established in the key agreement; generating (64; 88) a signature (SIG FCSj) using the control instruction and information provided by the device, the information comprising an identifier (UID i) associated with the device derived from at least a portion of a public key of a static key pair (d FCis, Q FCis); generating (65; 90) a message (M n) comprising the encrypted control instruction and the signature; and sending said message to a feature controller of said device; and the feature controller of the device: receiving from the feature control server, the message comprising the encrypted control instruction for controlling the device and the signature, the signature having been generated using the control instruction and information provided by the device, the information provided by the device comprising an identifier associated with the device; decrypting the encrypted control instruction to obtain the control instruction; verifying the signature; and if the signature is verified, executing the control instruction. receiving from the feature control server, the message comprising the encrypted control instruction for controlling the device and the signature, the signature having been generated using the control instruction and information provided by the device, the information provided by the device comprising an identifier associated with the device; decrypting the encrypted control instruction to obtain the control instruction; verifying the signature; and if the signature is verified, executing the control instruction.