Cloud Certificate Generation for Automated Authentication Updates

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing digital certificate systems require manual updates and deployment processes for certification changes, leading to inefficiencies, resource consumption, and compatibility issues, especially in large-scale enterprises.

Innovation Solution

A computing system that generates and stores digital certificates using prepackaged files from cloud object storage, performs authentication processes, and stores trusted certificates on a serverless computing platform, facilitating efficient and automated certificate management.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Extent of automation

If manual build and deploy process is used for certificate updates, then certificate changes can be implemented, but time consumption and resource usage increase significantly

Engineering Contradiction:

Improvecertificate update automationVSAvoidtime for manual build and deploy

Core Design Contradiction:

Extent of automationVSLoss of time

Solution Approach 1:

The system performs self-service by automatically detecting certificate changes in cloud object storage, generating new certificates, and deploying them without human intervention. The certificate management system monitors itself and executes update workflows autonomously, eliminating the need for manual build and deploy processes.

Inventive Principle:

Principle #25Self-service

Solution Approach 2:

The system performs preliminary actions by pre-configuring certificate templates, authentication channels, and deployment workflows in advance. When certificate changes are detected, the pre-established automation rules and processes are immediately triggered, significantly reducing the time required for certificate updates compared to ad-hoc manual processes.

Inventive Principle:

Principle #10Preliminary action

2Extent of automation

If manual build and deploy process is used for certificate updates, then certificate changes can be implemented, but resource consumption increases

Engineering Contradiction:

Improvecertificate update automationVSAvoidresource consumption for manual processes

Core Design Contradiction:

Extent of automationVSUse of energy by moving object

Solution Approach 1:

Inventive Principle:

Principle #25Self-service

3Productivity

If manual build and deploy process is used, then certificate updates can be performed, but compatibility issues and latencies occur

Engineering Contradiction:

Improvecertificate update speedVSAvoidcertificate compatibility and latency

Core Design Contradiction:

ProductivityVSReliability

Solution Approach 1:

The system implements feedback mechanisms by continuously monitoring certificate validity, detecting changes in cloud object storage, and verifying successful deployment. This closed-loop feedback ensures that certificate updates are performed correctly and timely, maintaining both high productivity and reliability without compatibility issues or latencies.

Inventive Principle:

Principle #23Feedback

4Productivity

If automated certificate generation is implemented, then efficiency improves, but system complexity increases

Engineering Contradiction:

Improvecertificate generation efficiencyVSAvoidsystem architecture complexity

Core Design Contradiction:

ProductivityVSDevice complexity

Solution Approach 1:

The system uses intermediary components such as cloud object storage as a centralized certificate repository, authentication channels as standardized communication interfaces, and template-based generation as an abstraction layer. These intermediaries simplify the automation process by providing standardized, manageable interfaces that reduce overall system complexity while maintaining high productivity.

Inventive Principle:

Principle #24Intermediary (Mediator)

Data Source

PatentUS12483543B2Secure digital certificate generation and storage for authentication

Publication Date: 2025.11.25 TRUIST BANK

AI summary

Systems and methods obtain a prepackaged file including third-party digital certificates stored to a cloud object storage location and communicatively connect a channel, configured to read data from the prepackaged file, to the cloud object storage location to facilitate generating a plurality of digital certificates. Further, the plurality of digital certificates are generated and each generated certificate of the plurality of generated certificates corresponds to a respective third-party certificate of the third-party digital certificates stored to the cloud object storage location and one or more authentication processes to access the prepackaged file and to facilitate storing the plurality of generated digital certificates is performed via the channel. The plurality of generated digital certificates are stored to at least one file location to facilitate future authentication.