Secure Barcode Data Exchange Between Isolated Networks

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing information exchange systems between separated networks, such as those in healthcare, face security risks due to potential leakage of confidential data when using two-dimensional barcodes, especially when printed on paper and exposed in public or lost.

Innovation Solution

An information transmission system that generates concealed data using a predetermined method, creating two-dimensional barcodes without information on the concealment method, allowing only authorized devices to decode and decrypt the data using pre-stored methods.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If two-dimensional barcode contains concealment information indicating the concealment method, then unauthorized access can be prevented, but the barcode becomes vulnerable to photographing and data leakage when printed on paper

Engineering Contradiction:

Improvesecurity of information exchangeVSAvoiddata leakage through photographing or loss of printed barcode

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent extracts the concealment information from the two-dimensional barcode. The barcode contains only encrypted patient information without any indication of the encryption method, while the concealment method is stored separately in the terminal device's memory. This separation prevents attackers from obtaining both the encrypted data and the decryption key through photographing or losing the printed barcode.

Inventive Principle:

Principle #2Taking out (Extraction)

Solution Approach 2:

The patent implements preliminary action by pre-storing the concealment method (encryption key) in the terminal device's memory before the information exchange. The terminal device automatically uses this pre-stored concealment method to decrypt the barcode data, eliminating the need for the concealment information to be present in the barcode itself.

Inventive Principle:

Principle #10Preliminary action

2Reliability

If network separation is implemented between hospital system and external systems, then confidentiality of electronic medical records is ensured, but information exchange between systems becomes complex

Engineering Contradiction:

Improveconfidentiality of electronic medical recordsVSAvoidcomplexity of information exchange between separated networks

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent uses two-dimensional barcode as an intermediary carrier to transfer information between separated networks. The barcode serves as a bridge that can be read by both the hospital terminal device and external systems, enabling information exchange without requiring direct network connection between the separated network segments.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent replaces complex network-based communication mechanisms with a simpler barcode reading mechanism. Instead of requiring network protocols, authentication servers, and data transmission protocols between separated networks, the system uses barcode scanning and local decryption, significantly simplifying the information exchange process.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

Data Source

PatentUS20250013765A1Information transmission system, information output device, and information transmission method

Publication Date: 2025.01.09 HITACHI HIGH TECH CORP

AI summary

It is possible to exchange highly confidential information between information systems of which networks are separated from each other. An information transmission system includes: an information output device that stores information to be shared, generates concealed data by compressing and concealing the information to be shared using a predetermined concealment method, and generates a two-dimensional barcode loaded with the concealed data but not loaded with concealment information indicating the concealment method; and an information input system that stores the concealment method in advance, decodes the two-dimensional barcode to acquire the concealed data, and decrypts the concealed data based on the concealment method.