Certificate Application via Gateway Decoupling

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The continuous upgrade of browser technologies and diversity of browsers complicates the stability and compatibility of data transmission channels between local devices and browsers, necessitating browser-dependent controls for digital certificate validation in network environments, which affects the reliability of interaction information in data service scenarios.

Innovation Solution

Implementing a certificate application method and apparatus that uses data transmission channels between terminal devices and gateways, independent of browser controls, by establishing channels based on subscription topic names, allowing decoupling from browser compatibility and enabling reliable digital certificate management and validation.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If browser controls are used for digital certificate validation, then digital certificate management can be implemented, but the stability and compatibility of data transmission channels are affected due to browser technology upgrades and diversity

Engineering Contradiction:
Improvestability of data transmission channelVSAvoidbrowser compatibility
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent introduces a gateway as an intermediary component between the terminal device and the certificate server. The gateway establishes a dedicated data transmission channel that mediates all certificate-related communications, isolating the system from direct browser dependency. This intermediary structure allows the certificate validation process to proceed through a stable, controlled channel while the browser merely initiates the process, thus resolving the contradiction between maintaining browser compatibility and ensuring transmission stability.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Ease of operation

If browser-dependent controls are used for certificate validation, then digital certificate functionality is achieved, but the complexity of maintaining compatibility across diverse browsers increases

Engineering Contradiction:
Improveease of certificate applicationVSAvoidbrowser compatibility management
Core Design Contradiction:
Ease of operationVSDevice complexity

Solution Approach 1:

The patent extracts the certificate validation logic from the browser environment and relocates it to a gateway-based architecture. The browser's role is reduced to merely triggering the certificate application process, while the actual validation, channel establishment, and data transmission are handled by the gateway and certificate server. This extraction eliminates the need to manage browser-specific compatibility issues while maintaining ease of operation for users.

Inventive Principle:
Principle #2Taking out (Extraction)

3Reliability

If a dedicated data transmission channel independent of browser controls is established, then reliability of data interaction information is enhanced, but the complexity of establishing and managing the channel increases

Engineering Contradiction:
Improvereliability of data interaction informationVSAvoidchannel establishment and management
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent implements preliminary action by pre-establishing the data transmission channel between the terminal device and the gateway before certificate validation begins. The gateway proactively creates and maintains this dedicated channel, and the terminal device subscribes to relevant topics in advance. This preliminary setup ensures that when certificate validation is needed, a reliable communication path is already in place, eliminating the need to manage channel complexity during the actual validation process.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS11095460B2Certificate application operations
Publication Date: 2021.08.17 ADVANCED NEW TECHNOLOGIES CO LTD
  • US11095460B2 patent drawing
  • US11095460B2 patent drawing
  • US11095460B2 patent drawing

AI summary

Implementations of this disclosure provide for certificate application operations. An example method includes sending, from a terminal device, a subscription topic name to a gateway to establish a data transmission channel between the terminal device and the gateway; receiving by the terminal device, via the data transmission channel, a certificate installation instruction from a certificate server; generating, by the terminal device, a user certificate request based on the certificate installation instruction; sending the user certificate request to the certificate server; and receiving, via the data transmission channel, a user certificate from the certificate server.