Patent ID: 11934507
Assignee: SIEMENS AKTIENGESELLSCHAFT
Field: Digital communication (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 0:
1. A method for project-related authentication of a device in a control system for a technical installation in the context of an engineering project, the control system including an operator system server having at least one first local registration authority, a process data archive including at least one software inventory and one certification authority formed on a project-related basis with a first hierarchy and a second hierarchy, the first hierarchy issuing project-related device certificates for devices, and the second hierarchy issuing project-related operational certificates for devices, the method comprising:
a) establishing information via one of the at least one first local registration authority and at least one second local registration authority of an engineering station to determine which communication protocols are supported by the device and are active during an authentication of the device within the control system;
b) requesting a project-related device certificate at the first hierarchy of the certification authority via one of the at least one first local registration authority and the at least one second local registration authority of the engineering station in an event one of the at least one first local registration authority the at least one second local registration authority of the engineering station verifies that a particular project-related device certificate is supported by the device and is active;
c) storing the project-related device certificate in a sub-inventory of the at least software inventory of the control system assigned to the engineering project;
d) requesting a project-related operational certificate via a device at one of the at least one first local registration authority and the at least one second local registration authority of the engineering station;
e) checking, via one of the at least one first local registration authority and the at least one second local registration authority of the engineering station, whether a corresponding project-related device certificate is stored in a sub-inventory of the software inventory of the control system assigned to the engineering project for the device issuing the request in the context of the engineering project in which the device is issuing the request;
f) requesting a project-related operational certificate at the first hierarchy of the certification authority via one of the at least one first local registration authority and the at least one second local registration authority of the engineering station in the event one of the at least one first local registration authority and the at least one second local registration authority of the engineering station verifies that a particular project-related operational certificate is supported by the device and is active; and
g) forwarding the project-related operational certificate from the first hierarchy of the certification authority to the device.