Barcode Reader Authentication via Encoded Hash Signatures
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional barcode readers lack secure authentication methods, especially in environments handling sensitive information, as they often lack keypads or displays, and existing solutions like MAC address management are cumbersome and insecure.
Innovation Solution
An image scanning apparatus and client computing device system that uses a barcode to encode and decode communication parameters, including a hash and digital signature, to authenticate and establish secure communication links between barcode readers and client devices, ensuring only authorized devices can upload features.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If barcode readers use conventional authentication methods like security passwords or PINs, then authentication security is improved, but device complexity increases because barcode readers lack keypads or displays
Solution Approach 1:
The patent introduces a client computing device as an intermediary that generates and displays authentication codes. The barcode reader captures these codes via its imaging assembly, enabling authentication without requiring a keypad or display on the barcode reader itself. This mediator approach resolves the contradiction by externalizing the complex authentication interface to a device that already has display and input capabilities.
2Reliability
If MAC addresses of all authorized client computing devices are stored in barcode readers, then authentication security is improved, but device complexity and maintenance burden increase because all barcode scanners must be updated when new devices are introduced or removed
Solution Approach 1:
The system enables dynamic authentication where the client computing device autonomously generates authentication codes based on its own identity (device ID, timestamp, random number). The barcode reader validates these codes using cryptographic verification without needing to maintain a centralized list of authorized devices. This self-service approach eliminates the need for system-wide updates when devices are added or removed.
Solution Approach 2:
The patent transforms the authentication mechanism from storing static device identifiers (MAC addresses) to verifying dynamic cryptographic parameters (authentication codes generated with device ID, timestamp, and random numbers). This parameter change allows the system to maintain security without maintaining centralized device registries, as each device independently generates valid authentication codes.
3Ease of operation
If barcode readers allow any application to be uploaded via barcode scanning, then ease of operation is improved, but security deteriorates because malicious applications can be uploaded
Solution Approach 1:
The system performs preliminary authentication verification before allowing application uploads. The client computing device generates an authentication code that proves its identity and authorization status before the barcode reader establishes a communication link. This preliminary action ensures that only authorized devices can initiate application uploads, preventing malicious applications from being uploaded while maintaining ease of operation for authorized users.
Data Source
AI summary
An apparatus and system for authenticating features for download to an image scanning apparatus has a client computing device generate an image of a symbol that encodes authentication data. The client computing device hashes a communication parameter of its transceiver, digitally signs the hash value with a private key from public-private key pair, and encodes the hash value, digital signature and the unencrypted communication parameter into the symbol. The image scanning apparatus captures an image of the symbol, decodes the symbol, verifies whether the unencrypted communication parameter corresponds to the hash of the communication parameter, and a public key stored in the memory of the barcode reader corresponds with the private key used to sign the hash value. If the communication parameter corresponds with the hash value and the signature corresponds with the public key, the barcode reader enables its transceiver to download the feature from the client computing device.