Meaning
An international standard defines a method for generating secure, digitally signed data profiles for automatic identification and data capture. Complying with ISO/IEC 20248 allows manufacturers to store verifiable electronic certificates on barcodes or RFID tags with minimal data overhead. This enables offline authentication of physical goods, preventing counterfeiting without requiring a constant database connection.
Data Compression
The standard uses efficient encoding schemes to compress cryptographic signatures so they fit into small memory spaces. By utilizing ISO/IEC 20248, devices can store a signed data block in less than a hundred bytes. This is particularly useful for linear barcodes or low-capacity transponders that cannot hold a standard public key certificate.
Verification Method
A reading device decodes the compressed data profile and uses the stored public key or a pre-loaded root certificate to verify the digital signature. This verification confirms that the product data has not been altered since it was signed by the manufacturer. Handover documents for supply chain systems specify this standard to ensure interoperability between different reader brands and software platforms.
Field tests measure the decoding speed of the reader to guarantee that the decryption process does not slow down scan times on the production line.
Security Application
Implementing this cryptographic technique secures high-value parts such as aviation components or medical devices against modification or replication. It provides a stable, standardized method for tracking the authenticity of parts from the factory to the end user.
