System and method for regulating barcode data injection into a running application on a smart device

• US 10,038,716 B2
• Filed: 05/01/2015
• Issued: 07/31/2018
• Est. Priority Date: 05/01/2015
• Status: Active Grant

• Current Assignee: Hand Held Products Incorporated (Honeywell International Inc.)
• Original Assignee: Hand Held Products Incorporated (Honeywell International Inc.)
• Inventors: Todeschini, Erik, Yeakley, Daniel D.
• Primary Examiner(s): Colin, Carl G
• Assistant Examiner(s): Cattungal, Dereena T
• Application Number:
  US14/702,110
• Publication Number:
  US 20160323310A1
• Time in Patent Office: 1,187 Days
• Field of Search: 726 25, 726 27
• CPC Class Codes: G06F 21/52 during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries
• CPC Class Codes: H04L 63/1466 Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks

Abstract

A system and method for regulating the injection of barcode scan data into an application running on a smart device is provided. The system includes a running application on a smart device. The running application has text fields with text field properties. The text field properties designate to either accept access or restrict access to the text fields from barcode scan data. The system further includes a keyboard buffer and a scan wedge having access to the keyboard buffer. The scan wedge is provided with means to discriminate between access and restricted access designations in the text field properties. The means to discriminate is configured to interrogate the text field properties to determine if the text field permits access to barcode scan data. The scan wedge is also configured to begin a barcode scan operation if the text field permits access to barcode scan data and to load barcode scan data into the keyboard buffer. The keyboard buffer is configured to display the barcode scan data as text in the text field of the application. The scan wedge is provided with logic to recognize patterns in barcode scan data. The scan wedge is configured to inspect the barcode scan data for regular patterns consistent with malicious attacks and if present, is configured to instruct the keyboard buffer to insert an error message in the running application.

Claims

1. A system for regulating the injection of barcode scan data into an application running on a smart device, comprising:

a running application on a smart device, the application having text fields;

the text fields each having text field properties;

the text field properties being designated to either accept access or restrict access to each of the text fields from barcode scan data;

a keyboard buffer;

a scan wedge having access to the keyboard buffer, the scan wedge being provided with means to discriminate between access and restricted access designations in the text field properties;

the means to discriminate being configured to interrogate the text field properties to determine if one of the text fields permits access to barcode scan data;

the scan wedge being configured to begin a barcode scan operation if the one text field permits access to barcode scan data;

the scan wedge being configured to load barcode scan data into the keyboard buffer; and

the keyboard buffer being configured to display the barcode scan data as text in the one text field of the application.

2. The system of claim 1, wherein the scan wedge is provided with logic to recognize patterns in barcode scan data, the scan wedge being further configured to inspect the barcode scan data for regular patterns consistent with malicious attacks, the scan wedge being configured to instruct the keyboard buffer to insert an error message in the running application if the regular patterns are found.

3. The system of claim 1, wherein at least one of the text field properties being a readable property of the text fields, the readable property having associated values which describe attributes of the text fields;

the attributes designating whether access to the text fields are permitted or not permitted;

the scan wedge being provided with the values of the readable property, the readable property and the associated values being a value pair;

the scan wedge being configured to look for the value pair of the at least one text field properties;

the scan wedge being further configured to begin the barcode scan operation only if the value pair of the at least one text field properties corresponds to the value pair provided on the scan wedge.

4. The system of claim 3, wherein the readable property describes the text fields and is selected from an id, a name, a tag, and other descriptor properties.

5. The system of claim 1, wherein the means to discriminate is accomplished with programming techniques selected from reflection and introspection.

6. The system of claim 1, wherein the scan wedge is configured to close if the one text field restricts access to barcode scan data.

7. The system of claim 6, wherein the scan wedge is configured to load an error message in the keyboard buffer if the one text field restricts access to barcode scan data;

and the keyboard buffer is configured to display the error message in the one text field of the running application.

8. The system of claim 1, wherein the means to discriminate comprises a white list and a black list provided on the scan wedge;

and wherein the text field properties being values either on the white list or on the black list, values on the white list designating permitted access to the text fields by barcode scan data, values on the black list designating restricted access to the text fields by barcode scan data; and

wherein, the scan wedge is configured to interrogate the text field properties and identify whether the text field property values are on the white list or on the black list.

9. The system of claim 1, wherein the application is native on the smart device.

10. The system of claim 1, wherein the application is a web application running in a browser on the smart device.

11. A method of regulating the injection of barcode scan data into a running application on a smart device, comprising the steps of:

i. running an application on a smart device, the application having at least one text field, the at least one text field having text field properties, the text field properties designating whether bar code scan data is permitted or not permitted in the at least one text field;

ii. inspecting the running application with a scan wedge;

iii. finding, with the scan wedge, a text field having focus within the application;

iv. reviewing and cross-referencing, with the scan wedge, properties of the text field having focus;

v. determining if barcode data can be deposited in the text field having focus based on the properties reviewed; and

vi. commencing a barcode scan if the determining step shows that barcode data is permitted;

wherein the inspecting step, the finding step, and the reviewing step are accomplished via programming capabilities of the scan wedge.

12. The method of claim 11, wherein if the barcode scan is commenced, further comprising the steps of:

inspecting barcode scan data for regular patterns of malicious attacks;

loading the barcode scan data into the keyboard buffer, and inserting the barcode scan data as text in the text field having focus if no regular patterns are found in the inspecting barcode scan data step; and

displaying an error message if regular patterns are found in the inspecting barcode scan data step.

13. The method of claim 11, wherein the scan wedge comprises a scan wedge application, and further comprising:

opening the scan wedge application prior to the inspecting step, and closing the scan wedge application if the determining step shows that barcode data is not permitted.

14. The method of claim 13, further comprising the step of:

displaying an error message.

15. The method of claim 11, wherein the programming capabilities are provided using reflection or introspection programming techniques.

16. The method of claim 12, wherein the scan wedge is provided with logic, and the inspecting barcode scan data step is accomplished using the logic.

17. The method of claim 11, wherein the scan wedge is provided with a white list and a black list;

and wherein the text field properties being values either on the white list or on the black list;

values on the white list designating permitted access to the text field by barcode scan data, values on the black list designating restricted access to the text field by barcode scan data; and

wherein, the reviewing step is accomplished by cross-referencing the text field property value of the text field having focus with the white list and black list on the scan wedge.

18. The method of claim 17, wherein barcode data can be deposited in the text field having focus if the determining step shows the text field property value is on the white list of the scan wedge.

19. The method of claim 17, wherein barcode data cannot be deposited in the text field having focus if the determining step shows the text field property value is on the black list of the scan wedge.