Encoded Information Reading Terminal External Token Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing encoded information reading (EIR) terminals lack effective user authentication mechanisms to prevent unauthorized use, which can lead to misuse and security breaches in applications such as retail and shipping facilities.
Innovation Solution
The EIR terminal incorporates a microprocessor, memory, and communication interface, along with an EIR device that can read barcodes, RFID tags, or cards, and uses an authentication token to verify user identity through a unique identifier and authorization levels, employing asymmetric key cryptography to secure data and prevent cloning, and communicates via wireless or wired interfaces to ensure secure operation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If user authentication mechanism is added to EIR terminal, then security against unauthorized use is improved, but device complexity increases
Solution Approach 1:
The patent introduces an external token as an intermediary authentication device that stores cryptographic keys and user identifiers. The token mediates between the user and the EIR terminal, handling the complex cryptographic operations externally. This allows the terminal to gain authentication capabilities without embedding complex cryptographic modules, thus improving security while minimizing the increase in terminal device complexity.
Solution Approach 2:
The patent extracts the authentication functionality from the EIR terminal and places it in a separate external token device. By taking out the cryptographic key storage and authentication logic from the terminal, the terminal itself remains relatively simple while still achieving secure authentication through verification of tokens received from external devices.
2Reliability
If asymmetric key cryptography is used for authentication, then security against cloning is improved, but computational requirements increase
Solution Approach 1:
The external token acts as a mediator that performs the computationally intensive asymmetric key cryptography operations. The token contains the private key and handles encryption/decryption, while the EIR terminal only performs lighter verification operations. This distribution of computational load reduces the power requirements for the terminal while maintaining high security through asymmetric cryptography.
3Adaptability or versatility
If authorization levels are implemented, then control over terminal operations is improved, but system complexity increases
Solution Approach 1:
The patent implements a universal authorization level system where the external token can store multiple authorization levels and the terminal can verify different types of operations based on these levels. This multi-functional authorization system is contained within the token and terminal software, allowing flexible control over scanning, data transfer, and other operations without adding physical hardware complexity for each authorization level.
Data Source
Figure 1
Figure 2
Figure 3a~3c
AI summary
An encoded information reading (EIR) terminal can comprise a microprocessor, a memory, a communication interface, and an EIR device, all communicatively coupled to a system bus. The EIR device can be provided by a bar code reading device, an RFID reading device, and/or a card reading device. The EIR device can be configured to output raw message data containing an encoded message and/or output decoded message data corresponding to an encoded message. The EIR terminal can be configured, responsive to receiving an identifier from an external token, to ascertain whether said identifier identifies a user allowed to operate said EIR terminal.