QR Codes - Warnings and Alternatives

This article is from QRWarning.com -- visit the site for further reading and resources.

It is probably safe to assume that most people are at least somewhat familiar with QR Codes. Many have most likely used them. These codes seem to be everywhere. They are on signs, brochures, ads, on TV, on consumer goods, groceries, and the list goes on.

Part of the reason for the growing exposure of QR Codes is an international organization called GS1 that has established a standard for product identification that everyone involved with retail sales will have to follow. This new requirement, called Sunrise 2027, which we are beginning to see in stores, incorporates QR Codes, along with a 1D and another 2D code (DataMatrix), on merchandise labels, packages, and tags. The purpose of these new requirements is to provide sales information to the retailer, suppliers, manufacturers, and consumers. The QR Code, due to its large capacity for information is primarily for customer information. This includes, but is not limited to, manufacture date and location, source, contents, and other information intended to help the consumer make an informed buying decision.

With this increasing use of QR Codes, many people may assume that it is the appropriate technology for all identification applications. That is not correct. While QR Codes do have many strengths, such as data capacity and being able to be read by smart phones, they may also be a source of fraud. QR Codes are relatively easy to clone and adulterate. Even the inclusion of encryption to the QR symbol, that in itself does not protect against cloning or addition of fraudulent data. These issues have been described in several warnings published by the FBI. Bad actors are able to change QR Codes to send unsuspecting users to fraudulent sites with the intent to steal.

Links to these FBI reports can be found at QRWarning.com.

While QR Codes may be appropriate for applications that require or invite consumer interaction, they certainly are not the best choice for applications that are mission critical, demand high levels of security and reliability, or are intended to detect counterfeiting and diversion in the manufacturing and distribution process. Over three hundred machine readable symbols have been created over the last 70 plus years, most of which have been authored in the last forty. Some of these, such as QR, Data Matrix, and most 1D codes are in the public domain. Some, however, remain proprietary, and often for good reason.

For applications that are not aimed at consumers and are intended for closed environments, such as in the case of B2B, security, integrity, and reliability is critical. A proprietary code, such as 2DMI from iTrace Technologies, or HD InfoCode+ from HD Barcode are examples.

As a case in point, 2DMI can not be cloned successfully, incorporates layered authentication, is robust in that it can be read even with physical damage, and has proven to be 100% effective in detecting bogus (counterfeit) parts and products.

​One such study that validates this was completed by a major aerospace company. This report is available upon request -- contact GlobalAutoID.​

Unlike a symbol such as QR Code, 2DMI can not be decoded or “read” by an off the shelf reader or smart phone that lacks proprietary, and closely controlled software, ensuring the integrity of the encoded data. The encoded information is tightly controlled which ensures the authenticity of the data and maintains the integrity of the supply chain.

Marking a proprietary symbol is no different than that of one such as QR Code. Typical printing methods as well as DPM (Direct Part Marking) technologies may be employed. Marking technologies include most print methods, thermal and thermal transfer, laser (etching/annealing), impact (dot peen), chemical etch, etc. Marks may be overt or covert and may be directly applied to the product or on associated packaging.