# US 12,256,025 B2 · Method and control system for technical installations with certificate management > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,256,025 B2 - Document ID: US12256025B2 - Status: Granted - Kind: B2 - Application number: 17/146,738 - Filed: 2021-01-12 - Published: 2021-07-15 - Granted: 2025-03-18 - Earliest claimed: 2020-01-14 - Assignees: Siemens Aktiengesellschaft - Applicants: Siemens Aktiengesellschaft - Inventors: Benjamin Lutz; Anna Palmin - Web page: https://patentgrep.com/patent/US12256025B2 ## CPC - G05B 19/042: using digital processors (G05B19/05 takes precedence) - H04L 9/3268: {using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]} - G05B 19/4185: {characterised by the network communication} - H04L 9/3247: {involving digital signatures} - G05B 2219/24163: Authentication tag in configuration file - Y02P 90/02: Total factory control, e.g. smart factories, flexible manufacturing systems [FMS] or integrated manufacturing systems [IMS] - G05B: CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS (systems for controlling or regulating non-electric variables G05D; systems for regulating electric or magnetic variables G05F; control devices or systems insofar as characterised by mechanical features only G05G) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - Y02P: CLIMATE CHANGE MITIGATION TECHNOLOGIES IN THE PRODUCTION OR PROCESSING OF GOODS ## Abstract A control system for a technical installation, in particular a manufacturing facility or process plant, includes at least one first operator station server and one second operator station server and is configured to initiate the issuance and revocation of certificates for components of the technical installation as part of certificate management, and is configured to publish revocation of a previously issued certificate within the control system as a certificate revocation list, where the control system is configured to store the certificate revocation list on the first operator station server and/or on the second operator station server, where the control system is configured to synchronize the first operator station server and the second operator station server with one another such that a certificate revocation list with identical content is stored on both operator station servers. ## Claims ### Claim 1 A control system of a manufacturing facility, the control system comprising: at least one first operator station server including a processor, a certificate revocation list and a revocation service; a second operator station server including a microprocessor and memory; at least one first component connected to the at least one first operator station server; and at least one second component connected to the second operator station server, the least one first and second components comprising at least one of sensors and actuators or a combination of sensors and actuators of the manufacturing facility; wherein the control system of the manufacturing facility initiates issuance and revocation of certificates for access to components of the manufacturing facility as part of certificate management and publishes any revocation of a previously issued certificate within the control system as the certificate revocation list within the at least one first operator station server; wherein the control system stores the certificate revocation list on at least one of (i) a user profile and selection service of the at least one first operator station server and (ii) a second user profile and selection service of the second operator station server; wherein the control system synchronizes the at least one first operator station server and second operator station server with one another via a mirroring service of the user profile and selection service such that a certificate revocation list with identical content is stored on the first and second operator station servers; wherein new/revised events are provided to the revocation service via a manage service of the user profile and selection service for future automated certificate revocations; wherein the at least one first component forms part of a first engineering project and the at least one second component forms part of a second engineering project; wherein the control system stores a first certificate revocation list specific to the first engineering project on at least one of (i) the user profile and selection service of the at least one first operator station server and (ii) the second user profile and selection service of the second operator station server, and stores a second certificate revocation list specific to the second engineering project on at least one of (i) the user profile and selection service of the at least one first operator station server and (ii) the second user profile and selection service of the of the second operator station server; and wherein the at least one first component has access solely to the first certificate revocation list and the at least one second component has access solely to the second certificate revocation list. ### Claim 2 (depends on 1) The control system as claimed in claim 1, wherein the revocation service comprises a computer-implemented revocation service which initiates the revocation of certificates in an event-controlled and automated manner. ### Claim 3 (depends on 2) The control system as claimed in claim 2, wherein a change in communication relationships between components of the manufacturing facility constitutes an event taken into account for initiating the revocation of certificates. ### Claim 4 (depends on 2) The control system as claimed in claim 2, wherein the revocation service initiates revocation of certificates by said revocation service submitting a revocation request to a certification authority; and wherein the revocation service one of (i) monitors processing of the revocation request and (ii) causes processing of the revocation request to be monitored. ### Claim 5 (depends on 1) The control system as claimed in claim 1, wherein a change in communication relationships between components of the manufacturing facility constitutes an event taken into account for initiating the revocation of certificates. ### Claim 6 A method comprising: a) initiating, by a control system of a manufacturing facility, issuance of a certificate for access to a component of the manufacturing facility, the control system including at least one first operator station server including a processor, a certificate revocation list and a computer-implemented revocation service, including a second operator station server having a microprocessor and memory, including at least one first component connected to the at least one first operator station server and including at least one second component connected to the second operator station server; b) initiating, by the computer-implemented revocation service of the control system of the manufacturing facility, revocation of the certificate for access to the component of the manufacturing facility; c) publishing the revocation of a previously issued certificate within the control system as a certificate revocation list which is stored on at least one of (i) a user profile and selection service of the first operator station server and (ii) a second user profile and selection service of the second operator station server; and d) synchronizing the at least one first operator station server and the second operator station server via a mirroring service of the user profile and selection service such that a certificate revocation list with identical content is stored on the first and second operator station servers; wherein new/revised events are provided to the revocation service via a manage service of the user profile and selection service for future automated certificate revocations; wherein the at least one first component forms part of a first engineering project and the at least one second component forms part of a second engineering project, the least one first and second components comprising at least one of sensor and actuators or a combination of sensors and actuators of the manufacturing facility; wherein the control system stores a first certificate revocation list specific to the first engineering project on at least one of (i) the user profile and selection service of the at least one first operator station server and (ii) the second user profile and selection service of the second operator station server, and stores a second certificate revocation list specific to the second engineering project on at least one of (i) the user profile and selection service of the at least one first operator station server and (ii) the second user profile and selection service of the of the second operator station server; and wherein the at least one first component has access solely to the first certificate revocation list and the at least one second component has access solely to the second certificate revocation list. ### Claim 7 (depends on 6) The method as claimed in claim 6, wherein a change in communication relationships between components of the manufacturing facility constitutes an event which triggers automated initiation of revocation of the certificate. ### Claim 8 (depends on 7) The method as claimed in claim 7, wherein the revocation service submits a revocation request to a certification authority to initiate the revocation of certificates; and wherein the revocation service one of (i) monitors the processing of the revocation request and (ii) instigates the monitoring of the revocation request. ### Claim 9 (depends on 6) The method as claimed in claim 6, wherein the revocation service submits a revocation request to a certification authority to initiate the revocation of certificates; and wherein the revocation service one of (i) monitors the processing of the revocation request and (ii) instigates the monitoring of the revocation request.