Systems and methods for secure provisioning of detector units
Techniques for secure provisioning of a detector unit are provided. An example method includes detecting, via a short-range communication interface, a coupling between a terminal and a detector unit; responsive to the coupling, obtaining, via one or more processors, identification information uniquely identifying the detector unit; transmitting, via a wireless communication network, the identification information to an access server; receiving, via the wireless communication network and from the access server, an access response indicating that the detector unit is an authorized device; and responsive to receiving the access response, provisioning, via the short-range communication interface, the detector unit with configuration information that enables the detector unit to access the wireless communication network.
1 . A method for securely provisioning a detector unit, the method comprising:
detecting, via a short-range communication interface, a coupling between a mobile computing device terminal and a detector unit, the mobile computing device terminal being attachable to the detector unit via a mechanical adapter coupled to the detector unit such that a top surface of the detector unit is adjacent to a bottom surface of the mechanical adapter and a top surface of the mechanical adapter is adjacent to a bottom surface of the mobile computing device terminal;
responsive to the coupling, obtaining, via one or more processors, identification information uniquely identifying the detector unit;
transmitting, via a wireless communication network, the identification information to an access server;
receiving, via the wireless communication network and from the access server, an access response indicating that the detector unit is an authorized device; and
responsive to receiving the access response, provisioning, via the short-range communication interface, the detector unit with configuration information that enables the detector unit to access the wireless communication network.
2 . The method of claim 1 , wherein communications via the short-range communication interface utilize a different communication protocol than communications over the wireless communication network.
3 . The method of claim 1 , wherein:
the identification information uniquely identifying the detector unit is at least one of a serial number and a media access control (MAC) address; and
to determine the access response, the access server is configured to compare at least one of the serial number and the MAC address to a list of approved serial numbers or MAC addresses.
4 . The method of claim 1 , wherein:
the detector unit is associated with a unique public key/private key pair;
the identification information uniquely identifying the detector unit includes a digital signature applied encrypted via the private key; and
to determine the access response, the access server is configured to decrypt the digital signature using the public key.
5 . The method of claim 1 , wherein the detector unit is at least one of a barcode scanner and radio frequency identification (RFID) reader.
6 . The method of claim 1 , wherein the short-range communication interface is at least one of a Bluetooth interface, a universal serial bus (USB) interface, a serial interface, an Ethernet interface, a near field communication (NFC) interface, or a general purpose input/output (GPIO) interface.
7 . The method of claim 1 , wherein the wireless communication network is at least one of a wireless fidelity (Wi-Fi) network and a cellular network.
8 . The method of claim 1 , wherein the wireless communication network is configured as a secure local area network (LAN).
9 . The method of claim 8 , wherein the configuration information includes a security certificate to authenticate with the secure LAN.
10 . The method of claim 1 , wherein the configuration information includes at least one of a network name for the wireless communication network, a network password for the wireless communication network, or a software update for the detector unit.
11 . A method for securely provisioning a detector unit, the method comprising:
detecting, via a short-range communication interface, a coupling between a mobile computing device terminal and a detector unit, the mobile computing device terminal being attachable to the detector unit via a mechanical adapter coupled to the detector unit such that a top surface of the detector unit is adjacent to a bottom surface of the mechanical adapter and a top surface of the mechanical adapter is adjacent to a bottom surface of the mobile computing device terminal;
responsive to the coupling, obtaining, via one or more processors, identification information uniquely identifying the detector unit;
comparing, by the one or more processors, the identification information to a list of identification information for devices authorized to use a wireless communication network;
determining, via the one or more processors, that the detector unit is an authorized device; and
responsive to the determination, provisioning, via the short-range communication interface, the detector unit with configuration information that enables the detector unit to access the wireless communication network.
12 . The method of claim 11 , wherein communications via the short-range communication interface utilize a different communication protocol than communications over the wireless communication network.
13 . The method of claim 11 , wherein:
the identification information uniquely identifying the detector unit is at least one of a serial number and a media access control (MAC) address;
the list of identification information includes a list of approved serial numbers or MAC addresses; and
to determine the access response, the access server is configured to compare at least one of the serial number and the MAC address to the list of approved serial numbers or MAC addresses.
14 . The method of claim 11 , wherein:
the detector unit is associated with a unique public key/private key pair;
the identification information uniquely identifying the detector unit includes a digital signature applied encrypted via the private key; and
determining that the detector unit is an authorized device comprises decrypting the digital signature using the public key.
15 . The method of claim 11 , wherein the detector unit is at least one of a barcode scanner and radio frequency identification (RFID) reader.
16 . The method of claim 11 , wherein the short-range communication interface is at least one of a Bluetooth interface, a universal serial bus (USB) interface, a serial interface, an Ethernet interface, a near field communication (NFC) interface, or a general purpose input/output (GPIO) interface.
17 . The method of claim 11 , further comprising:
obtaining, from an access server, the list of identification information.
18 . The method of claim 11 , wherein the wireless communication network is at least one of a wireless fidelity (Wi-Fi) network and a cellular network.
19 . The method of claim 11 , wherein:
the wireless communication network is configured as a secure local area network (LAN); and
the configuration information includes a security certificate to authenticate with the secure LAN.
20 . The method of claim 11 , wherein the configuration information includes at least one of a network name for the wireless communication network, a network password for the wireless communication network, or a software update for the detector unit.