Topic starter
25/06/2026 2:57 pm
TL;DR: Certificate, device, and AI-era trust controls are converging into one governance problem, not separate tracks, according to DigiCert, which says it filed 32 patents in FY24, exceeding its initial target of 20 by 160%, with work spanning trust, certificates, IoT, content, encryption, machine learning and AI, and quantum security.
Editorial analysis by NHI Mgmt Group, based on content published by DigiCert: “Pioneering the next wave of secure digital solutions”.
By the numbers:
- DigiCert started the year with a goal of submitting 20 patents.
- DigiCert filed 32 patents by the end of FY24.
Key questions
Q: How should security teams govern digital trust across human and machine identities?
A: Security teams should treat digital trust as a shared governance model across human identities, service identities, workloads, and devices.
Q: When should organisations prioritise post-quantum upgrades over routine certificate maintenance?
A: Prioritise post-quantum upgrades when systems protect sensitive data, mission-critical services, or public key based authentication and signatures.
Q: What breaks when certificate governance is separated from workload and device identity?
A: Separation creates blind spots in ownership, expiry handling, and trust assurance.
Practitioner guidance
- Map trust domains to one governance model Inventory where certificates, devices, AI workflows, and content verification are managed today, then assign common ownership for identity binding and assurance policy.
- Review certificate lifecycle dependencies Document which applications, devices, and workloads depend on long-lived certificates so expiry, renewal, and revocation are governed as business-critical events.
- Build cryptographic agility into roadmaps Identify systems that would be hardest to migrate to post-quantum algorithms and prioritise them for redesign before refresh cycles lock in technical debt.
Bottom line: Digital trust now spans certificates, IoT, content verification, encryption, AI, and quantum resilience, so siloed ownership no longer matches the control problem.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
25/06/2026 4:13 pm
Digital trust is converging into one governance domain. The article’s patent themes show that certificates, IoT, content verification, encryption, AI, and quantum security are no longer separate conversations. Practitioners should read that as a sign that trust architecture is becoming cross-domain rather than point-solution driven. The implication is that identity, cryptography, and verification policy need one governance model, not scattered owners.
A few things that frame the scale:
- 48% of organisations cite cloud-based services as a driver for PKI deployment, according to the 2023 State of Machine Identity Management report.
A question worth separating out:
Q: What is the difference between digital identity and PKI in online trust?
A: Digital identity answers who or what is trying to access a system, while PKI provides the cryptographic framework that proves it and protects the exchange. Identity relies on credentials, attributes, and behavior to establish trust signals. PKI then uses certificates and key pairs to authenticate parties, encrypt traffic, and support integrity and non-repudiation in digital interactions.
👉 Read our full editorial: DigiCert patents point to the next phase of digital trust