Abstract:
Described is a system and method for securing settings of a computing device. A data capture device comprises a memory storing a first parameter for a setting, an input arrangement receiving first authentication data from a user of the scanner and a processor comparing the first authentication data to stored data to authenticate the user. The stored data includes second authentication data corresponding to at least one user authorized to reconfigure the setting. If the user is authenticated, the processor adjusts the setting with a second parameter received from the user.

Description:
FIELD OF INVENTION 
       [0001]    The present invention generally relates to systems and methods for securing settings of a computing device. In particular, the present invention relates to securing settings of a data capture device such as, for example, a barcode scanner and/or a radio frequency identification (RFID) reader. 
       BACKGROUND 
       [0002]    Generally, settings for a conventional computing device are initially configured by a manufacturer. This allows the computing device to be used out-of-the-box without requiring manual configuration prior to use. However, the settings are typically customizable and reconfigurable based on, for example, user preferences, operating environments, intended uses, etc. 
         [0003]    Typically, there is no restriction on reconfiguring the settings. Thus, an employee may reconfigure the settings based on personal preference, even though an employer may desire the computing device to predefined settings. For example, the employee may adjust a brightness level of a display screen of the computing device to a maximum level. While this is a departure from the predefined settings, this setting may also unnecessarily waste power available to the computing device. In addition, a subsequent user of the computing device may waste time reconfiguring the settings based on his personal preferences. Thus, there is a need to restrict access to the settings of the computing device. 
       SUMMARY OF THE INVENTION 
       [0004]    The present invention relates to a system and method for securing settings of a computing device. A barcode scanner comprises a memory storing a first parameter for a setting, an input arrangement receiving first authentication data from a user of the scanner and a processor comparing the first authentication data to stored data to authenticate the user. The stored data includes second authentication data corresponding to at least one user authorized to reconfigure the setting. If the user is authenticated, the processor adjusts the setting with a second parameter received from the user. 
     
    
     
       BRIEF DESCRIPTION OF THE DRAWINGS 
         [0005]      FIG. 1  shows an exemplary embodiment of a system according to the present invention. 
           [0006]      FIG. 2  shows an exemplary embodiment of a method according to the present invention. 
       
    
    
     DETAILED DESCRIPTION 
       [0007]    The present invention may be further understood with reference to the following description and the attached drawings, wherein like elements are referred to with the same reference numerals. The exemplary embodiments of the present invention describe a system and method for securing settings of a computing device. Although the exemplary embodiments will be described with reference to a mobile computing device and, in particular, a barcode scanner, those of skill in the art will understand that the systems and methods for securing settings may be similarly implemented on stationary computing devices such as, for example, PCs, copiers, fax machines, sound systems, display screens, smart appliances, etc. 
         [0008]      FIG. 1  shows an exemplary embodiment of a system  2  for securing settings on a computing device according to the present invention. The system  2  may comprise components typically utilized in a wired/wireless local area network (LAN). For example, the system  2  may include a server  4  that is coupled to a wireless access point (AP)  6  via a communications network  8 . The network  8  may comprise one or more network computing devices (e.g., routers, bridges, repeaters, etc.) which are part of and/or connected to other communications networks (e.g., further LANs, an intranet, a wide area network, the Internet). The server  4  may also have access to a database  10  which may be used in an authentication procedure, as will be described further below. 
         [0009]    The AP  6  provides wireless access to the server  4  and the network  8  for a mobile computing unit (MU)  12 . The MU  12  may be a processor-based computing device which includes a memory and a wireless transceiver for conducting wireless communications with the AP  6  (e.g., according to an IEEE 802.11 protocol). The MU  12  may be an imager-/laser-based scanner, an RFID reader, a mobile phone, a PDA, a laptop, a tablet computer, a digital camera, a portable media player, a handheld computer, etc. 
         [0010]    The memory of the MU  12  stores setting data corresponding to at least one setting of the MU  12 . The settings may include, for example, barcode symbologies recognized by the MU  12 , a date/time, a display characteristic (e.g., volume, LCD brightness), a power-save mode time, a scan session time, wireless communications, etc. Those of skill in the art will understand that the present invention may be similarly implemented for any other setting utilized by the MU  12 . The setting data may further include a parameter which corresponds to each of the settings and is used for current operation of the MU  12 . For example, the setting for the LCD brightness may include a parameter indicative of a brightness level. 
         [0011]    In the exemplary embodiment, access to the setting data is restricted by a security mechanism (e.g., password, biometric, location-based, MU identifier, etc.). That is, the security mechanism may prevent an unauthorized user from reconfiguring a setting with a new parameter. In one exemplary use, an employer may implement the security mechanism to ensure that employees do not reconfigure the setting data. For example, the setting data may be configured with a parameter(s) indicating that the MU  12  should only recognize proprietary barcodes utilized in the employer&#39;s store. If the setting data was reconfigured to recognize standard barcodes (e.g., UPC, EAN), the MU  12  may improperly recognize or decode the proprietary barcodes. 
         [0012]    In another exemplary use, the setting data may be configured with a parameter(s) indicative of a current date and time. In this manner, the MU  12  may be used for age verification procedures during the purchase of tobacco, alcohol, firearms, video games, movies, magazines, etc. Allowing an employee to reconfigure the current date and time may enable underage persons to obtain these items. 
         [0013]    In a further exemplary use, the setting data may be configured with a parameter(s) indicative of one or more display characteristics. That is, the employer may determine parameters for LCD brightness and volume which are sufficient for the employees to conduct their assigned tasks in known environments (e.g., retail store, warehouse, shipping yard, etc.). Using these parameters, the MU  12  will not have to be recharged during the tasks. In addition, the MU  12  will operate uniformly between uses and users. Allowing the employees to alter the setting(s) for the display characteristic(s) may unnecessarily waste battery power of the MU  12  and time for subsequent users of the MU  12 . 
         [0014]      FIG. 2  shows an exemplary embodiment of a method  200  for securing settings on a computing device according to the present invention. The method  200  describes a process for authenticating a user, and determining whether the user is authorized to enter a new parameter for reconfiguring a setting of the MU  12 . While the exemplary embodiment will be described with reference to the server  4  executing the authentication procedure, those of skill in the art will understand that the authentication procedure may be similarly implemented by the MU  12 . That is, the MU  12  may execute the full authentication process without communicating with the network  8  or the server  4 . In this embodiment, the MU  12  may not include the wireless transceiver. 
         [0015]    In step  202 , a setting is selected by the MU  12  in response to a user indication, e.g., a selection of the setting via a user interface (e.g., touch screen/pad, keypad, etc.) of the MU  12 . The processor of the MU  12  may interpret the selection and select the corresponding setting. A parameter associated with the setting may be displayed on a display screen of the MU  12 . 
         [0016]    In step  204 , the MU  12  receives authentication data from the user. That is, if the user attempts to change the parameter for the setting, the MU  12  may prompt the user for the authentication data. The authentication data may be, for example, a password, a PIN code, a biometric identifier (e.g., retina scan, fingerprint, voice), a handwriting sample (e.g., a signature), etc. and received via an input arrangement (e.g., a keypad, a laser-based scanner, an image capture device, a biometric reader, a touch screen and a touch pad). Those of skill in the art will understand that the user interface of the MU  12  or a peripheral device (e.g., a barcode scanner) coupled thereto or integral therewith may be utilized to receive the authentication data. For example, the scanner may scan a barcode on the user&#39;s identification badge and/or may scan barcodes associated with commands and/or alphanumeric characters. In the latter case, the scanner may scan a command barcode for entering a password, then scan letter/number barcodes and finally scan an input barcode so that the password is assembled by the MU  12  to complete the authentication data. 
         [0017]    In step  206 , the MU  12  transmits the authentication data to the server  4 , and the server  4  compares the authentication data to stored data in the database  10 . The stored data may be input by an administrator and correspond to authentication data of users authorized to adjust the setting(s) of the MU  12 . Alternatively, the stored data may correspond to an initial password stored on the MU  12  or input by the user upon a first use of the MU  12 . In one exemplary embodiment, the authentication data may authorize the user to change a plurality of settings on the MU  12 . That is, one password may allow the user to change any or selected ones of the settings on the MU  12 . In another exemplary embodiment, a separate password may be required to change each of the settings. For example, the user may be given a password to change the parameters for the display characteristics of the MU  12 , but not the date/time parameter. 
         [0018]    In the exemplary embodiment, the server  4  compares the authentication data to the stored data and generates result data indicating whether the user is authorized to change the parameter for the setting. As noted above, the authentication procedure may be performed locally by the MU  12 . In this instance, the stored data may be stored in the memory of the MU  12 . The store data may be updated periodically by, for example, downloading the stored data from the server  4  and replacing it in the memory of the MU  12 . In this manner, the administrator may authorize users to change the settings from a remote location. 
         [0019]    In step  208 , the result data indicates that the authentication data does not match the stored data. The result data is transmitted to the MU  12 , and the MU  12  disallows the user&#39;s request to enter a new parameter for the setting. In step  210 , the result data indicates that the authentication data matched the stored data. The result data is transmitted to the MU  12 , and the user is allowed to enter a new parameter for the setting. In step  212 , the MU  12  reconfigures the setting with the new parameter. 
         [0020]    In another exemplary embodiment, the result data may include a limit on the new parameter. For example, the limit may indicate that the new parameter for the LCD brightness must be within a predefined range. The MU  12  may deny the change if the new parameter is outside of the limit. Alternatively, the result data may include a predetermined list of parameters from which the user may choose. 
         [0021]    In a further exemplary embodiment, the server  4  may utilize an override after determining whether the user is authorized to change the setting. For example, a comparison of the authentication data to the stored data may indicate that the user is not authorized to change the setting. However, based on a location of the MU  12 , a time of use, etc., the result data may be overridden to indicate that the user is authorized to change the setting or may impose a less stringent limit on the new parameter. Alternatively, the override may be implemented as an expanded limit/range for the new parameter. An exemplary scenario in which the location may be utilized is when the MU  12  is being used in a shipping yard. The user may be unauthorized to change the LCD brightness. However, because the MU  12  is being used in the shipping yard, the server  8  may authorize the user to change the setting. Thus, on an overnight shift, the user may adjust the LCD brightness. 
         [0022]    The present invention has been described with the reference to the above exemplary embodiments. However, those of skill in the art will understand that various modifications and changes may be made to the embodiments without departing from the broadest spirit and scope of the present invention as set forth in the claims that follow. The specification and drawings, accordingly, should be regarded in an illustrative rather than restrictive sense.