In order to maintain high availability and ensure optimum inventory efficiency, Datascan employs redundent server pools with automated failover and backup.
Network connection options
Client Network Connection
Datascan scanners are able to communicate with our servers via either a wireless or wired network using a TCP connection.
Three options are available depending on a particular clients circumstances: Analog/Ethernet/WiFi.
This is the least invasive method requiring only a cabled connection between a cradle (supplied by Datascan) and a phone/fax socket. Using this method an upload takes 45 seconds regardless of how many Areas are being uploaded.
This method is faster than analog, and requires a mimimum of network configuration. Upload time is less than 30 seconds.
The Datascan cradle connects to the network via ethernet. The cradle allows the Scanner to access the datascan server using a TCP connection. The cradle must obtain an IP addresss automatically from a DHCP server. If only static IP's are available Datascan will need to know the open IP ranges to program them into the cradles.
Depending on a clients network configuration, some may need to open an outgoing port on the firewall. In this case, the outgoing port can be opened with a known destination IP and port range. When a scanner attempts to upload, it will connect to a Datascan server with a public IP address. No incoming ports need to be opened on a client's premises.
This is by far the fastest method of data upload as it is done instantly in the background as scanning continues. However, this is only possible if there is an existing in-store WiFi network. Clients will still need to open the ports/IP ranges, as with the Ethernet connection, in order to connect as WiFI does not support static IP only DHCP.
Independent 3G Network Connection
Datascan is able to supply clients with 3G wireless routers direct to stores to create a temporary in-store WIFI hot spot for use during the count. Sufficient routers can be provided to enable store wide coverage. These routers can be configured to use the best carrier service available to ensure optimum connectivity. In this case, upload speeds are similar to in-store WiFi connectivity and there is no intrusion to a client's network.
Datascan's Fit-for-Purpose scanner is designed with data security in mind.
Security features include:
Custom compiled Linux kernel
- No TCP/IP for added security
- Comm port only active during upload
- No shell port available
- Communicates over serial to WiFi
- No direct access to OS
- Powered on only during communication
- No open incoming ports
- Uses common port numbers
- WEP (not recommended) WPA2 Enterprise
- WPA-PSK 802.1x
- WPA2-PSK PEAP
- AES EAP-TLS
SSID Information security
All SSID passphrases are encrypted with 128-bit AES, and the AES key is encrypted with a 1024-bit RSA public key. On the scanner, the AES key is decrypted using the RSA public key.
Inventory data security
All inventory data sent from the scanner is encrypted in the same manner as the SSID, but a different key is used for added security. Endpoint server access requires login and verification.