Encoded Information Reading Terminal External Token Authentication

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing encoded information reading (EIR) terminals lack effective user authentication mechanisms to prevent unauthorized use, which can lead to misuse and security breaches in applications such as retail and shipping facilities.

Innovation Solution

The EIR terminal incorporates a microprocessor, memory, and communication interface, along with an EIR device that can read barcodes, RFID tags, or cards, and uses an authentication token to verify user identity through a unique identifier and authorization levels, employing asymmetric key cryptography to secure data and prevent cloning, and communicates via wireless or wired interfaces to ensure secure operation.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If user authentication mechanism is added to EIR terminal, then security against unauthorized use is improved, but device complexity increases

Engineering Contradiction:
ImprovesecurityVSAvoiddevice complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces an external token as an intermediary authentication device that stores cryptographic keys and user identifiers. The token mediates between the user and the EIR terminal, handling the complex cryptographic operations externally. This allows the terminal to gain authentication capabilities without embedding complex cryptographic modules, thus improving security while minimizing the increase in terminal device complexity.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent extracts the authentication functionality from the EIR terminal and places it in a separate external token device. By taking out the cryptographic key storage and authentication logic from the terminal, the terminal itself remains relatively simple while still achieving secure authentication through verification of tokens received from external devices.

Inventive Principle:
Principle #2Taking out (Extraction)

2Reliability

If asymmetric key cryptography is used for authentication, then security against cloning is improved, but computational requirements increase

Engineering Contradiction:
ImprovesecurityVSAvoidcomputational requirements
Core Design Contradiction:
ReliabilityVSPower

Solution Approach 1:

The external token acts as a mediator that performs the computationally intensive asymmetric key cryptography operations. The token contains the private key and handles encryption/decryption, while the EIR terminal only performs lighter verification operations. This distribution of computational load reduces the power requirements for the terminal while maintaining high security through asymmetric cryptography.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Adaptability or versatility

If authorization levels are implemented, then control over terminal operations is improved, but system complexity increases

Engineering Contradiction:
Improvecontrol over operationsVSAvoidsystem complexity
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent implements a universal authorization level system where the external token can store multiple authorization levels and the terminal can verify different types of operations based on these levels. This multi-functional authorization system is contained within the token and terminal software, allowing flexible control over scanning, data transfer, and other operations without adding physical hardware complexity for each authorization level.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentEP2795530B1Encoded information reading terminal using external token
Publication Date: 2020.02.26 HAND HELD PRODS INC
  • EP2795530B1 patent drawingFigure 1
  • EP2795530B1 patent drawingFigure 2
  • EP2795530B1 patent drawingFigure 3a~3c

AI summary

An encoded information reading (EIR) terminal can comprise a microprocessor, a memory, a communication interface, and an EIR device, all communicatively coupled to a system bus. The EIR device can be provided by a bar code reading device, an RFID reading device, and/or a card reading device. The EIR device can be configured to output raw message data containing an encoded message and/or output decoded message data corresponding to an encoded message. The EIR terminal can be configured, responsive to receiving an identifier from an external token, to ascertain whether said identifier identifies a user allowed to operate said EIR terminal.