Secure ID Scanning With On-Device Decoding and Volatile Memory
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing barcode scanning methods on mobile devices face challenges in ensuring secure and efficient data handling, particularly in scenarios where personal information is involved, as they often require manual image capture and storage on non-volatile memory, risking data privacy and security.
Innovation Solution
A system utilizing a server system for secure handover between devices, employing on-device processing, end-to-end encryption, and volatile memory storage to ensure secure and efficient scanning of optical patterns, such as barcodes and QR codes, without exposing personal information to the hosting provider.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If manual image capture and storage on non-volatile memory is used, then scanning functionality is achieved, but data privacy and security are compromised
Solution Approach 1:
The patent extracts the image capture and processing functionality from the cloud server and places it directly on the mobile device. The device's camera captures images and the embedded processing unit decodes optical patterns locally, eliminating the need to store images on non-volatile memory or transmit them to external servers, thus resolving the security concern while maintaining operational simplicity
Solution Approach 2:
The patent introduces an intermediary embedded processing unit that acts as a bridge between the camera and the output interface. This unit processes images in real-time using volatile memory, preventing direct access to personal information by external systems while maintaining the scanning workflow, thus resolving the contradiction between security and ease of operation
2Ease of manufacture
If cloud-based processing is used, then integration effort is reduced, but data exposure risk increases
Solution Approach 1:
The patent segments the system into three distinct parts: (1) a simple integration layer that provides the user interface and initiates scanning, (2) an embedded processing unit that performs all image decoding and data extraction locally, and (3) an output interface that transmits only decoded information. This segmentation allows easy integration while preventing data exposure by keeping sensitive processing isolated from cloud systems
Solution Approach 2:
The patent performs preliminary processing of images on the device itself before any data leaves the device. The embedded processing unit decodes optical patterns and extracts personal information locally, so that only non-sensitive decoded data needs to be transmitted externally, reducing data exposure risk while maintaining integration simplicity
3Productivity
If non-volatile memory storage is used, then image data is retained for processing, but data breach vulnerability increases
Solution Approach 1:
The patent changes the memory parameter from non-volatile to volatile storage. The embedded processing unit uses volatile memory to temporarily hold images during processing, which automatically clears when power is removed or the device restarts. This maintains processing efficiency through rapid access while eliminating long-term data retention that creates breach vulnerabilities
4Adaptability or versatility
If external hosting provider access is allowed, then cloud service functionality is enabled, but private information security is compromised
Solution Approach 1:
The patent extracts the critical processing function from the cloud hosting environment and places it on the device's embedded processing unit. The hosting provider's system is reduced to providing only the user interface and output transmission capabilities, while all sensitive image processing and personal information extraction occurs locally, preventing the hosting provider from accessing private information while maintaining cloud service functionality
Data Source
AI summary
A method for decoding an optical pattern includes transmitting instructions for a first device to provide a link and an encryption key to a second device. The link includes a URL and a session ID that the first device has with a website. The method includes receiving a web request made by the second device using the URL. The method includes transmitting decoding software to the second device for decoding fields of a document based on image analysis of an image acquired by the second device. The method includes receiving decoded data from the second device. The method includes transmitting the decoded data to the website through a server in which the server uses only volatile memory to store the decoded data.