Certificate Update Automation via Batch Scheduling

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing certificate management systems fail to ensure that certificates are updated in a timely and efficient manner, leading to potential security breaches due to the use of obsolete encryption methods, which can prevent intended recipients from decrypting data.

Innovation Solution

A method and device for automatically updating certificates by determining the need for updates, requesting updates within a preset number, and setting timers to manage the update process, ensuring that only the most current certificates are used for encryption and decryption.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If certificates are updated frequently to maintain security, then security reliability is improved, but system complexity and processing overhead increase

Engineering Contradiction:
ImprovesecurityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system automatically determines which certificates need updating and requests updates autonomously without manual intervention. The device monitors certificate validity periods and initiates update requests when necessary, making the system self-managing and reducing operational complexity.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The system proactively checks certificate validity periods and requests updates before certificates expire. By performing preliminary actions to identify and update certificates in advance, the system prevents security breaches while maintaining organized control over the update process.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If all certificates are updated simultaneously, then security is improved, but processing time and energy consumption increase

Engineering Contradiction:
ImprovesecurityVSAvoidprocessing time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The system segments the certificate update process by determining the number of certificates requiring updates and comparing it against a preset threshold. When the number exceeds the threshold, updates are processed in batches rather than all at once, dividing the workload into manageable segments that reduce processing time and energy consumption.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The system updates only the necessary portion of certificates in each processing cycle rather than all certificates simultaneously. By updating a controlled number of certificates per cycle (preset number), the system achieves sufficient security improvement while avoiding the excessive processing burden of updating all certificates at once.

Inventive Principle:
Principle #16Partial or excessive action

3Productivity

If certificate updates are delayed, then processing overhead is reduced, but security reliability deteriorates due to obsolete encryption methods

Engineering Contradiction:
Improveprocessing efficiencyVSAvoidsecurity
Core Design Contradiction:
ProductivityVSReliability

Solution Approach 1:

The system continuously monitors and determines the validity periods of certificates, using this feedback information to trigger update requests when certificates approach expiration. This feedback mechanism ensures certificates are updated timely to maintain security while avoiding unnecessary updates that would waste processing resources.

Inventive Principle:
Principle #23Feedback

4Device complexity

If manual certificate update management is used, then system complexity is reduced, but time loss increases due to manual intervention requirements

Engineering Contradiction:
Improvesystem complexityVSAvoidtime loss
Core Design Contradiction:
Device complexityVSLoss of time

Solution Approach 1:

The system automatically determines which certificates need updating, requests updates from certification authorities, and manages the update process without manual intervention. This self-service capability eliminates the time loss associated with manual certificate management while maintaining reasonable system complexity through automated workflows.

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS8990221B2Device and method for updating a certificate
Publication Date: 2015.03.24 NOKIA TECHNOLOGIES OY
  • US8990221B2 patent drawing
  • US8990221B2 patent drawing
  • US8990221B2 patent drawing

AI summary

A method updates certificates for potential recipients. The method comprises determining whether the certificates require updating. The method comprises determining a number of the certificates that require updating. The method comprises requesting updates for each of the certificates that require updating when the number is at most a preset number and sets a timer to a first time duration. The method comprises requesting updates for up to the preset number of the certificates that require updating when the number is greater than the preset number and sets the timer to a second time duration.