Patent ID: 8583809

Claim:
A method comprising: establishing a secure session on behalf of a connection owner, the secure session being maintained by a server that is connected to a wireless device via a communications network, the connection owner being associated with the wireless device, the secure session defining a context for a secure over-the-air device connection between the connection owner and the server; while establishing the secure session, storing, on both the server and the wireless device, a registration key and a reset key, in association with the secure session, wherein the reset key differs from the registration key; using the registration key to authenticate and optionally to encrypt messages of the established secure session exchanged between the wireless device and the server; and upon determining at the wireless device that the registration key is irretrievable from a memory of the wireless device, generating at the wireless device a request to reset the established secure session, using the reset key to generate at the wireless device a first Message Authentication Code (MAC) from the request, and transmitting the request and the first MAC from the wireless device to the server; upon receipt of the request and the first MAC at the server, destroying the secure session at the server.