Decentralized Digital Certificate Generation via Pre-installed CA Data

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Conventional centralized certification systems require end-entities to send Certificate Signing Requests to a Certification Authority, leading to delays in establishing secure communications, as they must verify the authenticity of multiple intermediate Certification Authorities before establishing trust.

Innovation Solution

A decentralized method generates a unique key pair, creates a Certificate Signing Request, and signs it with pre-installed system data to produce a signed trust certificate, allowing secure communication without relying on external Certification Authorities.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a centralized Certification Authority system is used to issue digital certificates, then the authenticity and trustworthiness of certificates can be verified, but end-entities must wait for CA processing before establishing secure communications

Engineering Contradiction:

Improvecertificate authenticity verificationVSAvoidtime to establish secure communication

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The patent pre-installs Certificate Authority data (including root certificates and intermediate certificates) into end-entities during manufacturing or initial setup. This preliminary action allows devices to immediately verify certificates without waiting for external CA processing, resolving the contradiction between reliable verification and fast communication establishment.

Inventive Principle:

Principle #10Preliminary action

2Reliability

If multiple intermediate Certification Authorities are involved in the certificate chain, then comprehensive trust verification is achieved, but the verification process becomes more complex and time-consuming

Engineering Contradiction:

Improvecomprehensive trust verificationVSAvoidcertificate chain verification complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent pre-configures the complete Certificate Authority chain (including all intermediate certificates) into end-entities beforehand. This allows the device to locally verify the entire certificate chain without needing to query external CAs during operation, reducing both complexity and verification time while maintaining comprehensive trust verification.

Inventive Principle:

Principle #10Preliminary action

3Reliability

If end-entities must send Certificate Signing Requests to external CAs, then proper certificate issuance is ensured, but administrative overhead and processing delays increase

Engineering Contradiction:

Improveproper certificate issuanceVSAvoidcertificate issuance speed

Core Design Contradiction:

ReliabilityVSProductivity

Solution Approach 1:

The patent enables end-entities to self-generate digital certificates using pre-installed CA data. Devices can autonomously create their own certificates and verify them locally without needing to communicate with external CAs, eliminating administrative overhead and significantly improving certificate issuance speed while maintaining proper issuance through cryptographic validation.

Inventive Principle:

Principle #25Self-service

Data Source

PatentUS11316701B1Decentralized system for generation and deployment of digital certificates

Publication Date: 2022.04.26 AMD DESIGN LLC

AI summary

A decentralized certificate module generates a unique key pair. The decentralized certificate module creates a certificate signing request (CSR) based at least on a public key of the unique key pair. The decentralized certificate module signs the CSR with pre-installed system data to generate a signed trust certificate. The decentralized certificate module initiates a secure communication that includes the signed trust certificate.