Synthetic data · No App, FDM or device connection
App · preview
09:41▰   ▮▮▮   ▱
ConnectIQ Passport
INTERACTIVE WIREFRAME · All identities, readings and approvals are samples.
Scroll within the phone for the full screen.
Secure connection · how a wireless reading earns trust

From methodology tools to passport.

Quality readings travel over encrypted BLE and Wi-Fi links to a controlled backend, never through a chat. The App only ever receives the approved result and a reference to the evidence.

Tamper-evident, not tamper-proof
01 · Context

Operator + task

Verified employee, a server-issued station session and the exact part and operation.

02 · Transmit

BLE + Wi-Fi link

The gauge sends its signed reading over paired BLE to a gateway, which forwards it on encrypted Wi-Fi.

03 · Verify

Evidence gateway

Check signer, paired device, session, freshness and duplicates. Failures go to quarantine.

04 · Preserve

Evidence vault

Originals locked for the retention period. Events are only ever appended.

05 · Decide

FDM Quality

Inspection, final QC and assessor decisions. Nothing is silently overwritten.

06 · Display

Skill Passport

Shows skill evidence and employer-issued status. Raw data stays controlled.

Transport + identity

Two identities. Two doors.

  • BLE instruments pair with LE Secure Connections and bond to one gateway
  • Wi-Fi devices use WPA3-Enterprise, certificates and mutual TLS
  • App users get short-lived sessions for one factory
  • A user session can never submit device evidence
  • No secrets or private keys inside the App
Confidentiality

Keep the raw data private.

  • Encrypted over the air and at rest
  • Every view and file is permission-checked
  • Shared passports hide drawings, part IDs and raw scores
  • Screenshots can’t be fully prevented on every device
Before production

Prove the trust boundary.

  • Test BLE pairing, Wi-Fi security, key storage and firmware
  • Test identity binding and offline behaviour
  • Agree retention, deletion and the China data model
  • This prototype is not a security certification
Primary technical references and verification limits

Tencent CloudBase · Identity and authorization

RFC 7515 · JSON Web Signature · RFC 8785 · JSON Canonicalization · RFC 8446 · TLS 1.3

Microsoft · Immutable object storage · Microsoft · SQL Ledger and protected digests · OWASP · Authorization

NIST SP 800-121 · Guide to Bluetooth Security · Wi-Fi Alliance · WPA3 security

These sources support the control primitives, not a certification of this proposed system. App platform developer pages were not retrievable during preparation. Confirm current login, privacy, QR entry, subscription-message, account-eligibility and domain requirements in the actual developer console before implementation.

Build notes · for the development team

One backend. Three ways in.

The App, FDM desktop and factory hardware all share one identity and evidence model. This page is a browser prototype, not deployable App code.

No production endpoints included
First-time worker
InviteBindWork

An expiring, single-use invitation pre-fills the factory and role. The employer confirms who the worker is, separately from their App account.

No email · password · résumé · phone number
Returning worker
ScanConfirmWork

Reuse the existing binding after checking the job and role are still valid, then jump straight back to the task.

Fresh session at every handover
Public QR visitor
TryRequestWait

Explore a sample passport with no access to real factory data. A shared QR code opens the door, it doesn’t unlock it.

Sample data only
Signed
What the factory device signs

Never sign just “PASS”.

Every inspection is sealed with its full context, so nobody can quietly change it later:

schema versiontenant / sitedevice IDboot epochsequenceevent + capture IDscapture timework sessionpart instancework orderrevisionoperationparticipant rolesfeature IDvalues · units · limitsinstrument resulttransport + pairing IDcalibration refhashes of originals

The server adds its own signed receipt. It never rewrites the signed bytes.

Tip: the FDM feature ID is a permanent identifier, not a balloon number, so renumbering a drawing never breaks the evidence chain.
A pass rate is not a skill score.

Part outcomes also depend on the machine, material, tooling, gauge and task difficulty. Start with traceable task experience and assessor-reviewed observations; formal qualification needs an approved assessment process.

Implementation fit: reuse ConnectIQ’s shared REST / .NET services and SQL data model where it fits. Check SQL Server / Azure SQL Ledger support for your actual deployment before relying on it. One logical product does not require copying every customer’s raw data across borders.

ConnectIQ · Manufacturing Memory / Digital Skill Passport
Proposed experience and security design · 6 October 2026
Self-contained HTML · No analytics · No external assets · No live API calls
Interface states are illustrative. Only the separate cryptographic lab performs real signing.