Field Device Certificate Provisioning for Secure Terminal Setup

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The installation of digital certificates on terminals for secure communication with field devices is complicated and often requires technical expertise, making it difficult for non-experts to establish secure connections.

Innovation Solution

A method and field device that facilitate the installation of digital certificates by sending executable certificate data to the terminal, which includes executable instructions tailored to the terminal's operating system, allowing the certificate to be installed automatically or with minimal user interaction.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If the digital certificate is manually installed on the terminal by downloading and installing it through an unsecured connection, then the secure communication can be established, but the installation process becomes complicated and requires technical expertise

Engineering Contradiction:
Improvesecure communicationVSAvoidcertificate installation
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The field device automatically performs the certificate installation process on the terminal without requiring manual user intervention. The field device sends the digital certificate to the terminal and automatically completes the installation, making the system self-servicing and eliminating the need for user expertise in certificate management

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The patent introduces an intermediary mechanism where the field device acts as a mediator that facilitates the certificate installation process. Instead of the user directly downloading and installing the certificate, the field device intermediates by automatically transmitting and installing the certificate on the terminal, simplifying the user's task while maintaining security

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If the digital certificate is professionally installed on the terminal before communication, then the HTTPS protocol can be used for secure communication, but the installation process is time-consuming and complex

Engineering Contradiction:
Improveencrypted communicationVSAvoidcertificate installation time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The field device performs the certificate installation action in advance, automatically preparing the terminal for secure communication before the actual communication begins. This preliminary automatic installation eliminates the time-consuming manual process that users would otherwise need to perform

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system performs self-service by automatically handling the certificate installation without requiring professional intervention or user time investment. The field device autonomously completes the installation process, freeing users from time-consuming technical tasks

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS20250385899A1Putting a digital certificate into service
Publication Date: 2025.12.18 VEGA GRIESHABER GMBH & CO
  • US20250385899A1 patent drawing

AI summary

A method for putting a digital certificate of a field device into service on a terminal, which comprises: Sending an inquiry for transmitting the digital certificate to the field device by way of the terminal, receiving the inquiry for transmitting the digital certificate by the field device, in response to receiving the inquiry for transmitting the digital certificate, sending executable certificate data via the field device to the terminal, wherein the executable certificate data comprise executable instructions and the digital certificate, receiving the executable certificate data by the terminal, and after the executable certificate data have been received by the terminal, executing the executable certificate data by the terminal, as a consequence of which the digital certificate is installed on the terminal. A field device executing the aforementioned method, and a computer-implemented method executed on this field device are also disclosed.