Field Device Certificate Commissioning for Automated End-Device Installation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The cumbersome and technically complex process of manually installing a digital certificate on an end device for secure communication with field devices in process automation technology, which often requires expert intervention.
Innovation Solution
A method where the end device requests a digital certificate from the field device, which sends executable certificate data that includes instructions tailored to the end device's operating system, allowing automated installation of the certificate, simplifying the process and enabling secure communication via HTTPS.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If manual installation of digital certificate is used, then security verification is achieved, but installation complexity and time consumption increase significantly
Solution Approach 1:
The system performs automatic certificate installation without requiring user intervention. The field device automatically transmits the digital certificate to the end device, and the end device automatically installs it, eliminating the need for manual expert installation while maintaining security verification
Solution Approach 2:
The digital certificate is pre-configured on the field device during manufacturing or initial setup. When commissioning occurs, the certificate is already ready for automatic transmission and installation, eliminating the need for on-site manual installation work
2Reliability
If manual expert installation is required, then certificate verification security is maintained, but commissioning time and resource requirements increase
Solution Approach 1:
The commissioning system automatically handles the entire certificate installation process including transmission, reception, and installation without requiring expert intervention, significantly reducing commissioning time while maintaining verification security
Solution Approach 2:
The manual mechanical process of expert installation is replaced with an automated electronic system that uses network communication to transmit certificates and automated software processes to install them, eliminating the time-consuming manual steps
3Ease of operation
If automated certificate installation is implemented, then ease of operation improves, but system complexity for generating executable instructions increases
Solution Approach 1:
The field device's web server application serves multiple functions: it manages the user interface, handles communication protocols, and now also generates executable installation instructions. This multi-functionality reduces overall system complexity by consolidating capabilities in one component
Solution Approach 2:
The web server application acts as an intermediary that bridges the field device's certificate storage and the end device's installation process. It generates executable instructions that mediate between the two systems, automating the installation while keeping the complexity contained within the web server layer
Data Source
Figure 1~3
AI summary
The invention relates to a method for activating a digital certificate of a field device (1) on an end device (2), comprising the following steps: sending a request to transmit the digital certificate to the field device (1) by the end device (2), receiving the request to transmit the digital certificate by the field device (1), sending executable certificate data by the field device (1) to the end device (2) in response to receiving the request to transmit the digital certificate, wherein the executable certificate data comprises executable instructions and the digital certificate, receiving the executable certificate data by the end device (2), and, after receiving the executable certificate data by the end device (2), executing the executable certificate data by the end device (2), thereby installing the digital certificate on the end device (2).Furthermore, a field device (1) is proposed which can be used in carrying out the above-mentioned procedure, as well as a computer-implemented procedure for execution on this field device (1).