Shareable QR code web app using authentication mechanism

Abstract

The method includes outputting a scannable identifier on a physical item. The method also includes configuring the scannable identifier to grant edit access to specified data based on a received configuration input, subject to subsequent end-user authentication. The method also includes configuring the scannable identifier to grant edit access to specified data based on a received configuration input, subject to subsequent end-user authentication, and receiving scan data corresponding to the scannable identifier and first end-user authentication data from a pre-authenticated first end-user. The method also includes providing the first end-user with edit access to the specified data based on the received scan data and first end-user authentication data.

Description

Background Art

[0001] Typically, users prefer to access data conveniently without entering a web address, i.e., a uniform resource locator (URL). Entering a URL takes time, and even a single character input error can lead the user in the wrong direction or require the entire URL to be re-entered. Hyperlinks on web pages are helpful, but hyperlinks are not easily accessible for scanning in the real world. In contrast, QR codes provide a convenient way for users to navigate more quickly and accurately to content such as websites, videos, audio, etc. QR codes are essentially an array of black and white squares and are typically used to store URLs and other information when scanned. Machine-readable QR codes are scanned by a camera on a computing device or within an existing photo and guide the user in a similar way to an entered URL or clicked hyperlink.

Summary of the Invention

[0002] In one embodiment, one or more non-transitory computer-readable storage media encode instructions that, when executed, configure a processing circuit of a computing device to output a scannable identifier on a physical item. The processing circuit is further configured to configure the scannable identifier to permit edit access to specified data based on a received configuration input and subsequent end-user authentication. The processing circuit is further configured to receive, from a first end-user, scan data corresponding to the scannable identifier and first end-user authentication data. The processing circuit is further configured to provide the first end-user with edit access to the specified data based on the received scan data and first end-user authentication data.

[0003] In another embodiment, the method includes outputting a scannable identifier on a physical item. The method also includes configuring the scannable identifier based on a received configuration input to grant edit access to specified data, subject to subsequent end-user authentication. The method also includes configuring the scannable identifier based on a received configuration input to grant edit access to specified data, subject to subsequent end-user authentication, and receiving scan data corresponding to the scannable identifier and first end-user authentication data from a pre-authenticated first end-user. The method also includes providing the first end-user with edit access to the specified data, based on the received scan data and first end-user authentication data.

[0004] In another embodiment, the computing device includes memory and a processor, the memory being coupled to the processor, and the processor is configured to perform an operation to output a scannable identifier on a physical item. The processor is further configured to configure the scannable identifier based on a configuration input received, to grant edit access to specified data, based on subsequent end-user authentication. The processor is further configured to receive scan data corresponding to the scannable identifier and first end-user authentication data from a first end-user. The processor is further configured to provide the first end-user with edit access to the specified data based on the received scan data and first end-user authentication data. [Brief explanation of the drawing]

[0005] [Figure 1A] Figure 1A schematically shows how a smartphone scans a QR code on a Post-it® note according to an embodiment.

[0006] [Figure 1B]Figure 1B schematically illustrates a welcome interface based on scanning a QR code on a Post-it® note, according to an embodiment.

[0007] [Figure 1C] Figure 1C is a schematic diagram illustrating a label selection interface according to an embodiment.

[0008] [Figure 1D] Figure 1D is a schematic diagram illustrating a note selection interface according to an embodiment.

[0009] [Figure 1E] Figure 1E is a schematic diagram illustrating an item selection interface according to an embodiment.

[0010] [Figure 2A] Figure 2A schematically illustrates an environment in which an authenticated end user scans a QR code on a Post-it® note located on a manufacturing machine with a smartphone, according to an embodiment.

[0011] [Figure 2B] Figure 2B is a schematic diagram showing an authentication interface according to an embodiment.

[0012] [Figure 2C] Figure 2C schematically shows how the end user in Figure 2B scans the QR code on a Post-it® note, according to an embodiment.

[0013] [Figure 2D] Figure 2D schematically illustrates how, according to an embodiment, the end user in Figure 2C is provided with content based on the prior authentication shown in Figure 2B.

[0014] [Figure 3A]FIG. 3A is a diagram schematically showing a state where a second end user scans a QR code on a Post-it (registered trademark) note according to an embodiment.

[0015] [Figure 3B] FIG. 3B is a diagram schematically showing a state where the end user in FIG. 3A is provided with content based on prior authentication according to an embodiment.

[0016] [Figure 4] FIG. 4 is a flowchart schematically showing a method of configuring end user access for a QR code according to an embodiment.

[0017] [Figure 5] FIG. 5 is a flowchart schematically showing a method by which an end user accesses secure data based on prior authentication and QR code configuration data according to an embodiment.

[0018] [Figure 6] FIG. 6 is a block diagram of computing hardware used to implement an embodiment.

MODE FOR CARRYING OUT THE INVENTION

[0019] This disclosure describes a technology that uses scannable identifiers, such as QR codes, to provide users with access to data in accordance with prior authentication. Rather than simply having end users scan QR codes to directly provide them with access to data, prior authentication of the end user provides significant technical advantages by enabling various pre-authenticated end users to not only access but also modify the data, while providing data security based on appropriate end-user authentication. This can be easily configured by an initialization user who can configure the end user's read and edit access, relying on the end user already being authenticated before scanning the identifier. The initialization user can place scannable identifiers on locations and / or objects, or have others place them, so that the type of location or object with the scannable identifier can influence what data is accessible. This eliminates less secure practices such as account sharing among end users and creates a more secure and customizable end-user experience based on the use of scannable identifiers in the most relevant locations.

[0020] Referring to FIG. 1A, a smartphone is depicted scanning a QR code on a Post-it (registered trademark) note. Although the removable physical item 100 in this embodiment is a Post-it (registered trademark) note, any suitable surface or object that can display the scannable identifier 102 in a scannable manner can be utilized. As a non-limiting example, the physical item 100 can include any kind of suitable object / surface (paper, plastic, wood, laminate, metal, 3D print, electronic display, electronic paper, hologram, etc.) and / or something that can display the content of a projection (laser, light, etc.). The physical item can be attached permanently or removably by any suitable attachment method, such as by adhesive, magnetic attachment, electrostatic attachment, etc. In an embodiment, the scannable identifier 102 can include a QR code, a barcode, or any other identifier recognizable by any kind of device that can recognize the scannable identifier 102. As will be detailed below, the scannable identifier 102 can be utilized to provide access to secure data managed by labels and / or items through the specification of configuration data.

[0021] In this non-limiting embodiment, a smartphone is depicted as an example, but the scanning device 104 may, in non-limiting examples, include a desktop, laptop, server, client, tablet, smartphone, computing cloud, or any type of device capable of capturing or recognizing an object having a scannable identifier 102, a physical item 100, and / or a scannable identifier 102 with or without a physical item 100 (in some embodiments, this may include printing or projecting the scannable identifier 102 onto an object without using a physical item 100). The display 106 of the scanning device 104 may display any suitable interface 108, such as a graphical user interface, to display the recognition / capture of the scannable identifier 102. To provide various types of confirmation that the scannable identifier 102 has been recognized, any suitable type of feedback may be optionally available, including but not limited to visual confirmation on the interface 108 (such as a camera view or a reproduction of the scannable identifier 102), audio / voice notification, haptic feedback, etc.

[0022] Referring to Figure 1B, a welcome interface is displayed based on the scanning of a QR code on a Post-it® note. After the initializing user scans the scannable identifier 102 using the scanning device 104, any suitable type of interface 108 may be available to enable the user to set configuration data. In various embodiments, an application interface or mobile app may utilize authentication configuration functions as well as content retrieval and editing functions. Interface 108 may provide a welcome screen, an authentication / login interface, etc. In some embodiments, the initializing user may create an account based on being the first user to scan the scannable identifier 102. The initializing user may request additional account creation information, such as an alphanumeric code or other suitable type of authentication data provided on a removable physical item 100, in a non-limiting example.

[0023] Referring to Figure 1C, a label selection interface is depicted. In an embodiment, interface 108 may provide labels 110, notes (shown in Figure 1D), etc., as digital representations of removable physical items 100. Once an initialization user account is established, interface 108 may allow the initialization user to create various labels 110. In some embodiments, configuration data such as labels 110 and notes 111 may relate to specific types of access for one or more end users. In an embodiment, labels 110 and notes 111 may be created / edited / deleted by the initialization user for end users authenticated according to any appropriate criteria. Non-limiting examples of end-user authentication may include authentication to an enterprise network (such as a directory service (Active Directory, OpenLDAP, Apache Directory, Domino, etc.)), authentication on a Wi-Fi network, social media profile authentication, authentication based on being in a specific location when scanning a QR code, and any other appropriate authentication criteria. For example, one label 110 and note 111 may be created for a user with a directory service profile that has an administrative role. Another label 110 or note 111 may be created for users whose directory service profile is associated with the manufacturing plant where the scanned QR code is located (for example, using location data from the scanning device 104). Yet another label 110 or note 111 may be created for any (or specific) end user authenticated on a network (such as Wi-Fi, directory service, workgroup, or IP address) at one or more designated locations (for example, a group of manufacturing plants belonging to a business unit). In other embodiments, the end user may be authenticated using social media account contacts in the scanning device 104 by authenticating the end user by verifying the device ID, such as using facial recognition or a passcode.In yet another embodiment, the end user may be authenticated based on the end user's age, end user's address, completion of any required training, end user's status in a shopping rewards program, etc.

[0024] Referring to Figure 1D, the note 111 selection interface is depicted. In embodiments, interface 108 may provide labels 110, notes 111, etc., as digital representations of removable physical items 100. Once an initialization user account is established, interface 108 may allow the initialization user to create various notes 111. In some embodiments, configuration data such as notes 111 may relate to specific types of access for one or more end users. In embodiments, notes 111 may be created / edited / deleted by the initialization user for end users authenticated according to any appropriate criteria described herein.

[0025] Referring to Figure 1E, the item 112 selection interface is depicted. As a non-limiting example, within a particular label 110 or note 111, the initialization user may add / edit / delete data of any type of content associated with any number of items 112, such as text, photos, graphics, videos, links / URLs, augmented reality (AR) content, and polls. In this way, the initialization user can create a custom experience that provides a manager (e.g., pre-authenticated within the corporate directory service on a smartphone) with access to the items 112 associated with the label 110 or note 111 created / modified by the initialization user.

[0026] As a non-limiting example, a label may allow an end user to view secure augmented reality content at a designated location. For example, using a QR code on a Post-it® note attached to a manufacturing machine, operating instructions (for the manufacturing machine) may appear in augmented reality on the user's smartphone. In other embodiments, the initialization user and / or the end user utilizing the augmented reality headset may configure and / or utilize the augmented reality content. Furthermore, the initialization user may grant the end user editing access to the data. As a non-limiting example, within a label 110 or note 111 for all factory employees, the factory manager may be able to edit items 112 associated with the label 110 or note 111 (e.g., create additional notes or modify images) based on pre-authentication that remains valid. In contrast, non-supervisory employees may not be given editing access to items 112 associated with the label 110 or note 111. In some embodiments, depending on how the initialization user configures the access associated with the label 110 or note 111, non-supervisory employees may not have access to some or all of the items 112.

[0027] In some embodiments, speech recognition may be used to set label 110 and / or item 112 and / or to create text content within label 110 and / or item 112. In embodiments, speech recognition may be implemented for any suitable function described herein. As a non-limiting example, the initialization user may verbally communicate instructions so that an authenticated manager has the ability to edit the operating instructions associated with a manufacturing machine. Similarly, this may be based on the authenticated manager scanning a scannable identifier 102 located on a physical item 100 that is currently attached to or to be attached to the manufacturing machine. In other embodiments, object recognition machine learning and / or artificial intelligence may be utilized. In embodiments, object recognition may be implemented for any suitable function described herein. As a non-limiting example, the initialization user may specify item 112 based on something identified as currently visible in the smartphone camera as a result of object recognition (e.g., a manufacturing machine). As the exemplary manufacturing machine is recognized by object recognition, items 112 such as operating instructions, associated financial data, and photographs may be automatically associated with the manufacturing machine, or it may be proposed to include such items for association with the manufacturing machine. In this way, when an end user scans a scannable identifier 102 on a removable physical item 100 attached to the manufacturing machine, (or in some embodiments) in combination with the location of a smartphone, the end user may be given read or editable access to the items 112 associated with the manufacturing machine.

[0028] In various embodiments, object recognition may be used to automatically suggest or provide content to end users. In embodiments, speech recognition may be implemented for any suitable function described herein. One or more neural networks may be used for various machine learning-related tasks described herein (e.g., object recognition / classification). As an example, one or more artificial neural networks (ANNs) may be used. In an ANN, the connections between nodes may form a directed acyclic graph (DAG). An ANN may include node inputs, one or more hidden activation layers, and node outputs, and may be used with activation functions for one or more hidden activation layers, such as linear functions, step functions, logistic (sigmoid) functions, tanh functions, modified linear unit (ReLU) functions, or combinations thereof. An ANN is trained by applying these activation functions to a training dataset, determining an optimized solution from adjustable weights and biases applied to the nodes in the hidden activation layers, and producing one or more outputs as the optimal solution with minimized error.

[0029] In machine learning applications, new inputs (such as one or more generated outputs) may be provided to an ANN model as training data to improve the accuracy of the ANN model and continuously minimize errors. One or more ANN models may utilize one-to-one, one-to-many, many-to-one, and / or many-to-many (e.g., sequence-to-sequence) sequence modeling. Such ANN models may include artificial intelligence components selected from a group including but not limited to artificial intelligence engines, Bayesian inference engines, and decision engines, and may have an adaptive learning engine that further includes a deep neural network learning engine. One or more ANN models may employ a combination of artificial intelligence techniques such as deep learning, random forest classifiers, processing engines and / or feature extraction from natural language input to data maps, speech, image, clustering algorithms, bounding box algorithms, or a combination thereof.

[0030] In embodiments, convolutional neural networks (CNNs) may be used. For example, a convolutional neural network (CNN) can be used as an ANN in the field of machine learning, such as a type of deep feedforward ANN applied for tuner assignment weights. The CNN may be shift- or spatially invariant and may take advantage of shared weight architecture and translation-invariant properties. In addition or alternatively, a recurrent neural network (RNN) may be used as an ANN that is a feedback neural network. An RNN may use an internal memory state to process a variable-length input sequence and produce one or more outputs. In an RNN, the connections between nodes may form a DAG along a temporal sequence. One or more different types of RNNs may be used, such as a standard RNN, a long short-term memory (LSTM) RNN architecture, and / or a gated recurrent unit RNN architecture. Embodiments may include artificial intelligence components selected from a group including an artificial intelligence engine, a Bayesian inference engine, and a decision engine, and may have an adaptive learning engine that further includes a deep neural network learning engine. Within the scope of this disclosure, the term "deep" in relation to a deep neural network learning engine is considered to be a technical term easily understood by those skilled in the art.

[0031] Referring to Figure 2A, an environment is depicted in which an authenticated end user uses a smartphone to scan a QR code on a Post-it® note located on a manufacturing machine. In a non-exclusive example, user 200 is pre-authenticated to a corporate directory service using a scanning device 202 (e.g., a smartphone) and is currently authenticated as the manager of the factory where object 208 (e.g., a manufacturing machine) is located. Object 208 has a removable physical item 204 (in a non-exclusive example, a Post-it® note) attached to it, on which a scannable identifier 206 (in a non-exclusive example, a QR code) is placed. In a non-exclusive example, the scannable identifier 206 may be associated with object 208 at a specific location. In this example, if the physical item 204 is moved or removed, scanning the scannable identifier 206 at a different location may return an error message based on the mismatch with the location data from the scanning device 202 at the time of the scan, a notification requesting the user to reattach the physical item 204 to object 208, and / or any other appropriate notification / instruction.

[0032] Referring to Figure 2B, the authentication interface is depicted. In this embodiment, as shown on the display 203 of the scanning device 202, user 200 enters authentication information, here using a username and password, but any appropriate type of authentication or combination of authentication, such as two-factor authentication, random number generation, or biometric authentication, can be used. An authentication indicator 210 may be displayed to show user 200 that user 200 has been authenticated, but may not be provided in some embodiments. In other embodiments, authentication may be based on authentication to a corporate network including a specific type of role assigned to the end user, authentication on a Wi-Fi network, social media profile authentication, authentication based on being in a specific location when scanning a QR code, the end user's age, the end user's address, completion of any required training, the end user's status in a shopping rewards program, and / or other appropriate authentication criteria.

[0033] Referring to Figure 2C, Figure 2B depicts an end user scanning a QR code on a Post-it® note, and secure content access can be determined by the access configuration. Here, the end user 200 is a manufacturing plant manager who has been pre-authenticated to the corporate directory service and is currently scanning a scannable identifier 206 placed on a removable physical item 204 within the plant using a scanning device 202.

[0034] Referring to Figure 2D, Figure 2C depicts the end user being provided with content based on the prior authentication shown in Figure 2B, and secure content access can be determined by the access configuration. Because end user 200 scanned the scannable identifier 206 after being pre-authenticated in the role of factory manager, end user 200 is provided with confirmation of user role 216 (e.g., factory manager) along with user identifier 214 on the display 203 of the scanning device 202. Depending on the pre-configuration of the labels and items associated with the scannable identifier 206, configured by the initialization user, secure content 218 may be provided to user 200 with read, edit, and / or delete access. The configuration inputs and configuration data referred to herein refer to inputs provided by the initialization user to configure the labels and / or items associated with the QR code, which in some embodiments may include an end user to whom such configuration authority has been delegated. In this example, since the end user 200 is a factory manager, they are granted editing access to the secure content 218 (e.g., operating instructions) of object 208 (e.g., manufacturing machinery) as the decision-maker determining what machine operators should have access to within the secure content 218. In contrast, machine operators may only be able to view content designated as viewable by the factory manager after being authenticated to the corporate directory service via the scanning device 202. In some embodiments, once an end user 200 is granted editing access to the secure content 218, they may delegate editing access to other end users 200 (based on their role, name, etc.), which may be granted revocably or non-revocably depending on the various embodiments.

[0035] Referring to Figure 3A, a second end user is shown scanning a QR code on a Post-it® note. In this embodiment, the end user 300 uses a scanning device 302 to scan a scannable identifier 306 placed on a removable physical item 304, and the version of the QR code on the scanning device 302 is displayed as the identifier 308.

[0036] Referring to Figure 3B, the end user in Figure 3A is shown being provided with content based on prior authentication. Here, the end user 300 is provided with confirmation of the user identifier 310 and user role 312 on the screen 303 of the scanning device 302. In this non-limiting example, the end user 300 is a corporate auditor and is scanning the same scannable identifier 306 located on the same removable physical item 304 located on the same manufacturing machine as described with respect to Figures 2A-2D. However, the secure content 314 here is configured by the initializing user as asset management data related to the manufacturing machine. This is different from the operation instructions accessed by the factory manager in Figures 2A-2D, because the end user 300 here is a corporate auditor. In some embodiments, the second user may be able to edit data that is different from (or a subset of) the data that the first end user has edit access to.

[0037] Referring to Figure 4, a flowchart is shown illustrating how to configure end-user access for a QR code in one embodiment. In block 400, the initializing user may scan the QR code. In block 402, the initializing user may log in. In block 404, the initializing user may provide configuration data for the data provided to each end-user for the QR code, such as by creating and editing labels and / or items associated with the QR code.

[0038] Referring to Figure 5, a flowchart is shown illustrating how an end user can access data based on prior authentication and QR code configuration data in one embodiment. In block 500, the end user is authenticated on a platform such as a directory service, workgroup, Wi-Fi network, or IP address usage. In block 502, the end user may scan a scannable identifier, such as a QR code, at a location corresponding to location data specified by the initializing user as part of the configuration data. In block 504, the end user may receive access to data (or secure data) based on prior authentication and scanning of the scannable identifier.

[0039] Referring to Figure 6, a block diagram is shown illustrating computing hardware, such as an exemplary computing device 600, for implementing an embodiment. The computing device 600 described herein is merely an example of a suitable computing device and does not imply any limitation to the scope of the presented embodiments. Nothing shown or described with respect to the computing device 600 should be construed as essential with respect to any element or part of it, nor should it create any dependency of any kind. In various embodiments, the computing device 600 may include, but is not limited to, a desktop, laptop, server, client, tablet, smartphone, computing cloud, or any other type of device that can access data. In some embodiments, the computing device 600 includes at least one processor 602 and memory including non-volatile memory 608 and / or volatile memory 610. The computing device 600 may include one or more displays, display hardware, and / or output devices 604, such as AR / VR / MR / XR hardware, monitors, speakers, headphones, projectors, wearable displays, holographic displays, and / or printers. The output device 604 may further include, for example, a display and / or speaker, an energy-emitting device (radio, microwave, infrared, visible light, ultraviolet, X-ray and gamma rays), an electronic output device (Wi-Fi, radar, laser, etc.), audio (of any frequency), and the like.

[0040] The computing device 600 may further include one or more input devices 606, for example, any device capable of measuring motion data (e.g., accelerometer, GPS, magnetometer, gyroscope, etc.), biometric data (e.g., blood pressure, pulse, heart rate, sweat, temperature, voice, face recognition, motion / gesture tracking, gaze tracking, iris or other types of eye recognition, hand shape, oxygen saturation, glucose level, fingerprints, DNA, dental records, weight, or other appropriate types of biometric data, etc.), video / still images, and audio (including sound waves audible to humans and ultrasound that is inaudible to humans). The input devices 606 may include any type of device capable of receiving data from other devices, such as visual and / or audio data captured from the real world, object detection data, etc. The input device 606 may include cameras (with or without audio recording), such as digital and / or analog cameras, still cameras, video cameras, thermal imaging cameras, infrared cameras, cameras with charge-coupled displays, night vision cameras, 3D cameras, webcams, and audio recorders.

[0041] The computing device 600 typically includes non-volatile memory 608 (e.g., ROM, flash memory, etc.), volatile memory 610 (e.g., RAM, etc.), or a combination thereof. The network interface 612 can facilitate communication over network 614 with other data sources, such as a database 618, via wiring, wide area networks, local area networks, personal area networks, cellular networks, satellite networks, etc. Suitable local area networks may include wired Ethernet and / or wireless technologies (e.g., Wireless Fidelity (Wi-Fi)). Suitable personal area networks may include wireless technologies such as IrDA, Bluetooth, Wireless USB, Z-Wave, ZigBee, and / or other short-range communication protocols. Similarly, suitable personal area networks may include wired computer buses such as USB and FireWire. Suitable cellular networks include, but are not limited to, technologies such as LTE, WiMAX, UMTS, CDMA, and GSM. The network interface 612 can communicately connect to any device capable of transmitting and / or receiving data over one or more networks 614. Therefore, the network interface 612 may include communication transceivers for transmitting and / or receiving wired or wireless communications. For example, the network interface 612 may include antennas, modems, LAN ports, Wi-Fi cards, WiMAX cards, mobile communication hardware, near-field communication hardware, satellite communication hardware, and / or wired or wireless hardware for communicating with other networks and / or devices.

[0042] Computer-readable media 616 includes one or more computer-readable media, each being non-temporary. Computer-readable media may reside, for example, within an input device 606, a non-volatile memory 608, a volatile memory 610, or a combination thereof. Readable storage media may include tangible media associated with or used by a device or system. Computer-readable media, also referred to here as non-temporary computer-readable media, include, in non-limiting examples, RAM, ROM, cache, optical fiber, EPROM / flash memory, CD / DVD / BD-ROM, hard disk drive, solid-state storage, optical or magnetic storage devices, diskettes, electrical connections with wires, or a combination thereof. Non-temporary computer-readable media may include, for example, magnetic, optical, semiconductor, or electronic type systems or devices. Non-temporary computer-readable media do not include carrier waves and / or propagating signals in the form of optical, electromagnetic, or a combination thereof.

[0043] The computing device 600 includes one or more network interfaces 612, which may facilitate communication with one or more remote devices, which may include client and / or server devices. The network interface 612 may also be described as a communication module, and these terms may be used interchangeably. The database 618 is accessible via network 614 and may reside in a server, cloud, or any other configuration that supports remote access to and storage of data in the database 618.

[0044] As used herein and in the appended claims, the singular “a,” “an,” and “the” encompass embodiments having multiple references unless otherwise indicated to indicate a clear difference in content. As used herein and in the appended claims, the term “or” is generally used to mean “and / or” unless otherwise indicated to indicate a clear difference in content.

[0045] While specific embodiments are shown and described herein, it should be understood that various other changes and modifications may be made without departing from the scope of the claimed subject matter. Furthermore, while various aspects of the claimed subject matter are described herein, such aspects do not need to be used in combination. Accordingly, the attached claims are intended to cover all such changes and modifications that fall within the scope of the claimed subject matter.

Claims

1. Output a scannable identifier on the physical item, Based on the received configuration input, configure the scannable identifier to grant edit access to the specified data based on subsequent end-user authentication. The system receives scan data corresponding to the scannable identifier and first end-user authentication data from the first end-user. Based on the received scan data and the first end-user authentication data, the system provides the first end-user with editing access to the specified data. One or more non-temporary computer-readable storage media on which instructions that constitute the processing circuitry of a computing device at runtime are encoded.

2. One or more non-temporary computer-readable storage media according to claim 1, wherein further instructions are encoded to receive the configuration input from an initialization user different from the first end user.

3. One or more non-temporary computer-readable storage media according to claim 1, wherein further instructions are encoded so that the first end-user authentication data is transmitted via Wi-Fi, directory services, IP addresses, workgroups, social media account data, device identification data, or any combination thereof.

4. One or more non-temporary computer-readable storage media according to claim 1, wherein the first end-user authentication data has further instructions encoded on it, based on the location data of the scan data.

5. One or more non-temporary computer-readable storage media according to claim 1, wherein further instructions are encoded so that the first end user is granted access different from the access granted to the second end user who scanned the scannable identifier.

6. One or more non-temporary computer-readable storage media according to claim 5, wherein further instructions are encoded such that the first end user has a role that permits access different from the access permitted to the second end user, who has a role different from that of the first end user.

7. One or more non-temporary computer-readable storage media according to claim 1, wherein the physical item is detachable from the object and has further instructions encoded so that it is configured to adhere to the object by adhesive, magnetic, or electrostatic means.

8. One or more non-temporary computer-readable storage media according to claim 7, wherein further instructions are encoded to grant the first end user edit access to the specified data relating to the object.

9. One or more non-temporary computer-readable storage media according to claim 1, wherein further instructions are encoded such that the configuration input includes data acquired via speech recognition.

10. One or more non-temporary computer-readable storage media according to claim 1, wherein the configuration input encodes further instructions such that it includes object recognition from a camera used to scan the scannable identifier.

11. One or more non-temporary computer-readable storage media according to claim 1, wherein further instructions are encoded such that the configuration input includes location information, end-user role information, end-user authentication data, or any combination thereof.

12. One or more non-temporary computer-readable storage media according to claim 1, wherein further instructions are encoded such that outputting the scannable identifier on the physical item is based on input received from an initialization user providing the configuration input.

13. A computing device including memory and a processor, wherein the memory is coupled to the processor, Output a scannable identifier on the physical item, Based on the received configuration input, configure the scannable identifier to grant edit access to the specified data based on subsequent end-user authentication. The system receives scan data corresponding to the scannable identifier and first end-user authentication data from the first end-user. Based on the received scan data and the first end-user authentication data, the system provides the first end-user with editing access to the specified data. It is configured to perform the following operation: Computing device.

14. The computing device according to claim 13, further including instructions to receive the configuration input from an initialization user different from the first end user.

15. The computing device according to claim 13, further including instructions such that the first end-user authentication data is based on the location data of the scan data.

16. The computing device according to claim 13, further including instructions to grant the first end user access different from the access granted to the second end user who scanned the scannable identifier.

17. The computing device according to claim 16, further including instructions to cause the first end user to have a role that grants access different from the access granted to the second end user, which has a role different from that of the first end user.

18. The computing device according to claim 13, further comprising instructions to configure the physical item to be detachable from the object and to be attached to the object by adhesive, magnetic, or electrostatic means.

19. Output a scannable identifier on the physical item, Based on the received configuration input, configure the scannable identifier to grant edit access to the specified data based on subsequent end-user authentication. The system receives scan data corresponding to the scannable identifier and first end-user authentication data from a first end-user who has been authenticated in advance. A method for providing the first end user with editing access to the specified data based on the received scan data and first end user authentication data.

20. The method according to claim 19, wherein the configuration input is received from an initialization user different from the first end user.

Images