Technology Impact
Datascan understands that a third party solution, such as Self-Scanning, will be most readily accepted when it is minimally intrusive to a client's IT systems. Consequently we have designed our solutions to have minimum impact to our client's IT infrastructure, requiring very little set-up and industry standard network configuration.
In order to maintain high availability and ensure optimum inventory efficiency, Datascan employs redundent server pools with automated failover and backup.

Network connection options


Client Network Connection


Datascan scanners are able to communicate with our servers via either a wireless or wired network using a TCP connection.
Three options are available depending on a particular clients circumstances: Analog/Ethernet/WiFi.

Analog
This is the least invasive method requiring only a cabled connection between a cradle (supplied by Datascan) and a phone/fax socket. Using this method an upload takes 45 seconds regardless of how many Areas are being uploaded.

Ethernet
This method is faster than analog, and requires a mimimum of network configuration.  Upload time is less than 30 seconds.

The Datascan cradle connects to the network via ethernet. The cradle allows the Scanner to access the datascan server using a TCP connection. The cradle must obtain an IP addresss automatically from a DHCP server. If only static IP's are available Datascan will need to know the open IP ranges to program them into the cradles.

Depending on a clients network configuration, some may need to open an outgoing port on the firewall. In this case, the outgoing port can be opened with a known destination IP and port range. When a scanner attempts to upload, it will connect to a Datascan server with a public IP address. No incoming ports need to be opened on a client's premises.

WiFi
This is by far the fastest method of data upload as it is done instantly in the background as scanning continues. However, this is only possible if there is an existing in-store WiFi network. Clients will still need to open the ports/IP ranges, as with the Ethernet connection, in order to connect as WiFI does not support static IP only DHCP. 


Independent 3G Network Connection


Datascan is able to supply clients with 3G wireless routers direct to stores to create a temporary in-store WIFI hot spot for use during the count. Sufficient routers can be provided to enable store wide coverage. These routers can be configured to use the best carrier service available to ensure optimum connectivity. In this case, upload speeds are similar to in-store WiFi connectivity and there is no intrusion to a client's network.

Scanner security


Datascan's Fit-for-Purpose scanner is designed with data security in mind.

Security features include:

Custom compiled Linux kernel
  • No TCP/IP for added security
  • Comm port only active during upload
  • No shell port available
  • Communicates over serial to WiFi
Embedded Serial -> Ethernet Module
  • No direct access to OS
  • Powered on only during communication
  • No open incoming ports
  • Uses common port numbers
Security protocols supported                                        Future security protocols 
  • WEP   (not recommended)                                         WPA2 Enterprise
  • WPA-PSK                                                                     802.1x
  • WPA2-PSK                                                                   PEAP
  • AES                                                                              EAP-TLS
  • TKIP

SSID Information security
All SSID passphrases are encrypted with 128-bit AES, and the AES key is encrypted with a 1024-bit RSA public key. On the scanner, the AES key is decrypted using the RSA public key.

Inventory data security
All inventory data sent from the scanner is encrypted in the same manner as the SSID, but a different key is used for added security. Endpoint server access requires login and verification.


 






CLIENT LOGIN
Username:
Password:
Your name:
Your location:
 
By selecting the “Login” button, I agree to
the Terms of Service.
Note that you will remain logged in for 24 hours,
unless you log out or close your browser.