Patent ID: 11882117
Assignee: nan
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 0:
1. A method of device label scan based zero-touch device onboarding at first-time power cycle including a device onboarder (DOB) mobile application executing on a mobile device, field devices, a device directory service (DDS), a key distribution service (KDS), a KDS portal, a KDS application programming interface, a KDS administrator, a pre-configured member pre-shared key (M-PSK) and a M-PSK identity hint associated with the mobile device, a pre-configured API key and a pre-configured API token associated with the mobile device, a pre-configured factory default member pre-shared key (M-PSK) and a M-PSK identity hint associated with a field device, a bootstrap application on the field device, a tenant identifier associated with the mobile device and the field device, a device type identifier associated with the field device, a printed device label with device unique immutable initial identifiers on the field device issued by an original equipment manufacturer (OEM), an asset metadata datastore associated with the DDS, a dynamic host configuration protocol (DHCP) server, a DHCP administrator, a domain name system (DNS) server, a DNS administrator, an initial device identifier issued by the OEM mapped in the DNS to an initial device IP address, a local device identifier issued by a device end user mapped in the DNS to a local device IP address, a vendor class identifier associated with a device type, and a tenant identifier associated with a tenant network domain, the method comprising:
importing, by the KDS administrator, device label templates for a plurality of device types associated with the field devices;
synchronizing, on the mobile device, the device label templates and the plurality of device types for the tenant identifier;
scanning printed device labels on the field device, using the mobile device, with a selected label template for the device type and generating a scan report;
inspecting the scan report, on the mobile device, and updating the scan report with extended device information;
uploading the updated scan report from the mobile device to the DDS;
storing the scan report, by the DDS, in associated asset metadata datastore;
querying, by the DDS from the DHCP server, vendor specific device information for the vendor class identifier associated with the device type of the field device and storing in the asset metadata datastore;
configuring the field device, automatically by the DDS, as a member device on the KDS with the associated device information in the asset metadata datastore;
creating, by the DHCP server, an address (A) and a plurality of pointer (PTR) records on the DNS server for the initial device identifier;
configuring, by the DNS administrator on the DNS server, the address (A) and the plurality of pointer (PTR) records for the local device identifier, and a canonical name (CNAME) record to map the local device identifier to the initial device identifier; and
registering the field device with the KDS, on a first-time power cycle of the field device, by the bootstrap application on the field device, with a field device two-factor authentication using the initial device identifier and a factory default member pre-shared key, and registering the field device with a member unique pre-shared key using the KDS application programming interface for a subsequent field device two-factor authentication.