Safety circuit for an elevator system, device and method of updating such a safety circuit
AssigneeOtis Elevator Company
InventorSven Knuth
Life of this patent
Estimating the term…
Abstract
A method of updating at least one security certificate of a safety circuit of an elevator system includes: connecting the safety circuit with a communicator which is capable to communicate with a certification server; sending from the communicator to the safety circuit a security certificate update request for updating at least one security certificate stored within the safety circuit; the safety circuit sending a public key of a safety circuit security certificate associated with the safety circuit via the communicator to the certification server; the certification server checking whether the safety circuit security certificate associated with the received public key is included in a data base of known security certificates and not marked as compromised.
Claims13
A method of updating a security certificate of a safety circuit of an elevator system, the method comprising:
- connecting the safety circuit with a communicator, the communicator in communication with a certification server;
- sending from the communicator to the safety circuit a security certificate update request for updating the security certificate stored within the safety circuit;
- the safety circuit sending a public key of the security certificate stored within the safety circuit via the communicator to the certification server;
- the certification server checking whether the security certificate associated with the public key is included in a database of known security certificates and not marked as compromised;
- in case the security certificate associated with the public key is included in the database of known security certificates and not marked as compromised, sending a new security certificate from the certification server via the communicator to the safety circuit and installing the new security certificate on the safety circuit;
- in case the security certificate associated with the public key (i) is not included in the database of known security certificates or (ii) is marked as compromised, sending a message from the certification server to the communicator indicating that the safety circuit is invalid.
A communicator for updating a security certificate stored within a safety circuit of an elevator system, the communicator comprising:
- a safety circuit interface configured for exchanging data with the safety circuit of the elevator system;
- and
- a server interface configured for exchanging data with a certification server;
- the communicator being configured for:
- establishing a first data connection with the safety circuit of the elevator system via the safety circuit interface;
- establishing a second data connection with the certification server via the server interface;
- sending, to the safety circuit, a security certificate update request for updating the security certificate stored within the safety circuit;
- receiving, from the safety circuit, a public key of the security certificate associated with the safety circuit and sending the public key of the security certificate to the certification server;
- receiving, from the certification server, a new security certificate, and sending the new security certificate to the safety circuit;
- or
- receiving, from the certification server, a message that the safety circuit is invalid;
- the safety circuit installing the new security certificate;
- wherein the certification server checks whether the security certificate associated with the public key is included in a database of known security certificates and not marked as compromised;
- wherein the certification server sends the new security certificate to the communicator when the security certificate associated with the public key is included in the database of known security certificates and not marked as compromised;
- wherein the certification server sends the message when the security certificate associated with the public key (i) is not included in the database of known security certificates or (ii) is marked as compromised.
Dependencies are inferred from the claim text.