An expiring, single-use invitation pre-fills the factory and role. The employer confirms who the worker is, separately from their App account.
No email · password · résumé · phone numberStart with a scan.
Build skills through real work.
An App front door for operators. One quality record for the factory.
Verified evidence
connects the two—without making the phone the source of truth.
Stronger evidence.
Skip the long registration form.
Never skip identity or evidence checks.
From methodology tools to passport.
Quality readings travel over encrypted BLE and Wi-Fi links to a controlled backend, never through a chat. The App only ever receives the approved result and a reference to the evidence.
Operator + task
Verified employee, a server-issued station session and the exact part and operation.
BLE + Wi-Fi link
The gauge sends its signed reading over paired BLE to a gateway, which forwards it on encrypted Wi-Fi.
Evidence gateway
Check signer, paired device, session, freshness and duplicates. Failures go to quarantine.
Evidence vault
Originals locked for the retention period. Events are only ever appended.
FDM Quality
Inspection, final QC and assessor decisions. Nothing is silently overwritten.
Skill Passport
Shows skill evidence and employer-issued status. Raw data stays controlled.
Two identities. Two doors.
- BLE instruments pair with LE Secure Connections and bond to one gateway
- Wi-Fi devices use WPA3-Enterprise, certificates and mutual TLS
- App users get short-lived sessions for one factory
- A user session can never submit device evidence
- No secrets or private keys inside the App
Keep the raw data private.
- Encrypted over the air and at rest
- Every view and file is permission-checked
- Shared passports hide drawings, part IDs and raw scores
- Screenshots can’t be fully prevented on every device
Prove the trust boundary.
- Test BLE pairing, Wi-Fi security, key storage and firmware
- Test identity binding and offline behaviour
- Agree retention, deletion and the China data model
- This prototype is not a security certification
Primary technical references and verification limits
Tencent CloudBase · Identity and authorization
RFC 7515 · JSON Web Signature · RFC 8785 · JSON Canonicalization · RFC 8446 · TLS 1.3
Microsoft · Immutable object storage · Microsoft · SQL Ledger and protected digests · OWASP · Authorization
NIST SP 800-121 · Guide to Bluetooth Security · Wi-Fi Alliance · WPA3 security
These sources support the control primitives, not a certification of this proposed system. App platform developer pages were not retrievable during preparation. Confirm current login, privacy, QR entry, subscription-message, account-eligibility and domain requirements in the actual developer console before implementation.
One backend. Three ways in.
The App, FDM desktop and factory hardware all share one identity and evidence model. This page is a browser prototype, not deployable App code.
Reuse the existing binding after checking the job and role are still valid, then jump straight back to the task.
Fresh session at every handoverExplore a sample passport with no access to real factory data. A shared QR code opens the door, it doesn’t unlock it.
Sample data onlyNever sign just “PASS”.
Every inspection is sealed with its full context, so nobody can quietly change it later:
The server adds its own signed receipt. It never rewrites the signed bytes.
Part outcomes also depend on the machine, material, tooling, gauge and task difficulty. Start with traceable task experience and assessor-reviewed observations; formal qualification needs an approved assessment process.
Implementation fit: reuse ConnectIQ’s shared REST / .NET services and SQL data model where it fits. Check SQL Server / Azure SQL Ledger support for your actual deployment before relying on it. One logical product does not require copying every customer’s raw data across borders.
Proposed experience and security design · 6 October 2026Self-contained HTML · No analytics · No external assets · No live API calls
Interface states are illustrative. Only the separate cryptographic lab performs real signing.