A Technical Deep-Dive into QR Codes and Their Multispectral Industrial Applications |
Chapter 16: Industry 3 - Pharmaceutical Anti-Counterfeiting |
Short Summary |
This chapter explores the critical role of QR codes in combating the global counterfeit drug crisis, with a primary focus on the United States regulatory framework. Under the Drug Supply Chain Security Act (DSCSA), every prescription drug package distributed in the U.S. must carry a unique 2D barcode---essentially a QR code---that encodes the National Drug Code, serial number, lot number, and expiration date. We explain how this serialization system works, from manufacturer to pharmacy, and how blockchain technology is being integrated to provide immutable verification of drug provenance. The chapter presents real-world American applications: McKesson's industry-leading serialization infrastructure, the MediLedger blockchain network connecting major health systems like Prisma Health, Purdue University's pioneering edible QR codes for on-dose authentication, and the FDA's role in enforcing compliance. We also examine the staggering economic and human costs of counterfeit drugs and demonstrate how QR codes serve as the frontline defense in protecting patient safety. |
|
Introduction: The Global Scourge of Counterfeit Medicines |
Every year, counterfeit medicines cause an estimated 500,000 deaths annually in sub-Saharan Africa alone. Globally, the counterfeit drug trade is a multi-billion-dollar criminal enterprise that not only drains resources from legitimate pharmaceutical companies but, more importantly, puts patients at grave risk. Counterfeit drugs may contain no active ingredients, the wrong ingredients, toxic substances, or incorrect dosages. They may be manufactured under unsanitary conditions, stored improperly, or deliberately mislabeled. |
The United States is not immune. The U.S. Food and Drug Administration (FDA) estimates that counterfeit drugs represent a growing threat to the American pharmaceutical supply chain. According to the U.S. Anti-counterfeiting Sticker Market Research Report, the pharmaceutical sector accounts for nearly 38% of total demand for anti-counterfeiting technologies, with counterfeit drugs causing estimated annual losses exceeding $200 billion globally . Recent FDA crackdowns on counterfeit medications have accelerated adoption rates, with pharmaceutical companies increasing security implementation by 22% year-over-year . |
The scale of the problem is staggering. The Healthcare Distribution Alliance (HDA) estimates that saleable returns of prescription drugs---which make up 2-4% of the U.S. prescription drug market---generate as many as 60 million electronic verification queries and responses annually . Every one of these queries represents a potential point of vulnerability where a counterfeit drug could enter the legitimate supply chain. |
Enter the QR code. Under the Drug Supply Chain Security Act (DSCSA), every prescription drug package distributed in the United States must carry a unique product identifier, typically a 2D matrix barcode reminiscent of a QR code . This code encodes the drug's National Drug Code (NDC), a unique serial number, the lot number, and the expiration date. When scanned at dispensing, the code allows pharmacists, distributors, and regulators to verify the drug's provenance---its entire journey from manufacturer to patient. |
This chapter explores the technical and regulatory framework behind pharmaceutical anti-counterfeiting, the American companies and health systems implementing it, and the emerging technologies that promise to make drug authentication even more robust. |
|
The Drug Supply Chain Security Act: A Decade in the Making |
The Drug Supply Chain Security Act (DSCSA) was enacted by Congress on November 27, 2013, establishing a 10-year timeline for achieving an interoperable track-and-trace system for prescription drugs at the individual package level . The act's purpose, as explained by Scott Mooney, vice president of distribution operations at McKesson, is 'to secure the US supply chain and to make sure that we have the ability to detect counterfeit products when they're introduced to the supply chain' . |
The DSCSA establishes a national, uniform chain of custody for drugs entering U.S. interstate commerce, with standards and processes for end-to-end product tracing, verification, and identification from manufacturer to filled prescription . The end goal is a documented, certified, secure chain of custody among vetted partners, capable of catching counterfeit product and legitimate product stolen or diverted into the black market . |
|
The implementation timeline has been gradual but relentless: |
2015: Rudimentary traceability at the lot level began, with McKesson and other wholesalers implementing lot-based traceability . |
2019: Package labeling changed to include a 2D matrix barcode (similar to a QR code) in addition to standard linear barcodes. For the first time, the product's lot number and expiration date were encoded digitally, along with a unique serial number . |
November 27, 2023: Full unit-level serialization took effect, requiring every package to have a unique serial number . |
November 27, 2024: The FDA's 'stabilization period' ended, with full enforcement beginning . |
The serialization requirement is deceptively simple but operationally complex. 'Every product package in the United States has a unique serial number on each individual package,' Mooney explains. 'There may be 10,000 bottles in a lot, but those 10,000 bottles are all individually numbered' . A pallet with 48 cases will have 48 serial numbers; each of the products within those 48 cases will also have their own serial numbers . |
This creates a nested hierarchy of serial numbers. A bottle of a drug has its own 2D barcode identifier linked to drug and shipment information---brand and generic name, shipment volume, dosage, and expiration date. A box of 10 bottles (each bottle with a unique serial identifier) has its own box serial identifier linked to each bottle inside. A carton of five boxes has its own serial identifier linked to each of the five boxes, and so on . |
|
How the Serialization System Works |
The serialization system under DSCSA is built on the principle of 'one-up, one-back' verification. Each party in the supply chain---manufacturer, wholesaler, repackager, and dispenser---is responsible for verifying that the shipment and documentation were received from a verified source, are complete and 100% accurate, and that ownership change is reported to a valid DSCSA repository . 'There's a daisy chain effect,' explains John Reichert, senior director of supply chain execution solutions at Tecsys. 'So if there's any kind of issue you can go back through the history to find where it originated' . |
The unique product identifier (UPI) on each drug package is typically a 2D data matrix code---a type of QR code---that contains: |
National Drug Code (NDC): A 10-digit number identifying the drug's manufacturer, product, and package size. |
Unique Serial Number: A distinct number assigned to each individual package, making it traceable back to its origin. |
Lot Number: The manufacturing batch identifier. |
Expiration Date: The date after which the drug should not be used . |
Pharmacies, distributors, and even patients can scan these QR codes using approved systems to confirm whether the product is legitimate and traceable. This serialization helps prevent counterfeit or diverted drugs from entering the legal market . |
Rather than having a centralized government database manage potentially sensitive medication information, the DSCSA relies on a decentralized network of private 'repository' partners like Axway, TraceLink, or rfxcel that manage data storage, query access, and compliance using the GS1 Electronic Product Code Information Services (EPCIS) data-sharing standard . The industry also developed Verification Routing Services (VRS) in 2019 to automate near-real-time queries and responses . |
|
US Application Examples: Pharmaceutical Anti-Counterfeiting in Action |
Example 1: McKesson - Building the Infrastructure for DSCSA Compliance |
McKesson Corporation, one of the largest pharmaceutical distributors in the United States, has been working since 2015 to implement the track-and-trace elements required by the DSCSA . The company's efforts provide a comprehensive picture of what full compliance looks like. |
McKesson has implemented a multi-phase approach: |
Phase 1 (2015-2019): Lot-based traceability was established, allowing McKesson to track products at the batch level. |
Phase 2 (2019-2023): Package labeling was updated to include 2D matrix barcodes with unique serial numbers. McKesson began collecting Global Location Number information and capturing serialized product identifiers to create DSCSA datasets for customers . |
Phase 3 (2023-present): Full unit-level traceability with data retention for six years. |
McKesson's customers access serialized data through McKesson Connect, an online portal where they can log in and query product data. 'You can query... 'What product did I buy today' because you want to check off that you accessed your DSCSA data,' Mooney explains . For customers who buy across McKesson business units, all transaction data becomes available in one spot . |
The scale of McKesson's operation is immense. A survey by the Healthcare Distribution Alliance (HDA) in early 2023 showed that fewer than a third of manufacturer respondents were able to send serialized data to their distribution partners, and half of distributors were receiving incomplete data on full product lines . McKesson's vice president of distribution operations estimated that only 35% of manufacturers were sending serialized data to distributors at that time, raising industry concerns about product being forced into quarantine . |
Despite these challenges, McKesson has pushed forward, positioning itself as a leader in DSCSA compliance and helping its customers navigate the complex new requirements. |
|
Example 2: MediLedger - Blockchain-Enabled Verification |
MediLedger, a San Francisco-based company founded in 2017, operates a blockchain-based network focused on transactions within the life sciences and healthcare industry . The company's solutions include real-time alignment, rule enforcement, and settlement of transactions between trading partners, serving sectors such as pharmaceutical manufacturers, wholesalers, group purchasing organizations, and health systems . |
The MediLedger network provides a blockchain-based verification system that enables real-time collaboration between Group Purchasing Organizations (GPOs), manufacturers, wholesalers, and hospitals . The system ensures alignment of contract and customer data, effectively identifies discrepancies, and proactively prevents costly audits . |
In August 2024, MediLedger announced a partnership with Prisma Health, South Carolina's largest health organization . Prisma Health joined other leading health systems, including OSF HealthCare and Baptist Health, on the MediLedger network . The partnership aims to streamline contract management processes and enhance pricing transparency for the pharmaceuticals purchased by Prisma Health's numerous facilities . |
Jennifer Bair, PharmD, MBA, BCPS, Vice President of Pharmacy Services and Chief Pharmacy Officer at Prisma Health, explained the rationale: 'With a vast network of healthcare facilities and a substantial inventory of pharmaceuticals, Prisma Health was in need of a solution that could simplify communication lines and guarantee that we receive the correct negotiated prices for pharmaceutical products promptly. The current manual processes are time-consuming and often lead to errors and cash flow issues. MediLedger's blockchain solution will enable us to collaborate in real-time with group purchasing organizations, manufacturers, and wholesalers, identifying and addressing pricing discrepancies before they impact our operations' . |
While MediLedger's primary focus is on pricing and contract management, the same blockchain infrastructure can support drug authentication and anti-counterfeiting. As noted in industry analysis, blockchain-integrated authentication solutions are gaining traction in the pharmaceutical sector, with major brands reporting a 40% reduction in counterfeiting incidents after implementing blockchain-based solutions . The technology's immutable record-keeping capability perfectly complements physical security measures, creating comprehensive protection systems . |
|
Example 3: Purdue University - Edible QR Codes for On-Dose Authentication |
Researchers at Purdue University have developed an edible, invisible printing method for QR codes that can identify and authenticate medicines at the dosage level . This innovation represents a significant advancement beyond external packaging security. |
The Purdue team introduced 'camouflaged biosafe QR code bioprinting and taggant construction for on-dose authentication of medications,' using biologically safe coloring and near-infrared absorbing dyes that are compatible with standard inkjet printers . The QR codes are printed on silk fibroin sheets, which are FDA-approved as a safe food additive and suitable for large-scale commercial printing . |
The key features of this technology are remarkable: |
Camouflaged: The QR codes are not immediately obvious to the naked eye but are optimized for readability by standard smartphone cameras under normal light conditions . |
Biosafe: The inks are biocompatible, as verified through hemocompatibility and digestibility tests . |
Tamper-resistant: The codes are placed directly on or in medication doses, making them extremely difficult to counterfeit . |
Consumer-empowering: Patients can personally verify their medication using their smartphones . |
The Purdue researchers explain the significance: 'Fake and counterfeit medicines threaten patient safety and health worldwide, in addition to causing significant economic losses. While there are some regulatory measures in place, these only address the exterior box security and do not allow patients themselves to verify the medications they may be taking' . By placing QR codes directly on the medication dose, 'every patient [is empowered] to personally authenticate their medication' . |
The technology validation process was thorough. The researchers used biologically safe coloring and NIR absorbing dyes, maintaining dye viscosity compatible with inkjet printers. The printing process was developed using silk fibroin sheets, and biocompatibility was investigated using hemocompatibility tests and digestibility tests that examined enzymatic degradation in vitro . Both tests supported the biocompatibility of QR code taggants . |
|
Example 4: The FDA and Regulatory Enforcement |
The U.S. Food and Drug Administration plays a central role in combating counterfeit drugs through enforcement of DSCSA regulations, inspection of manufacturing facilities, and maintenance of drug registration systems . |
The FDA's responsibilities include: |
Enforcing DSCSA regulations to enhance traceability across the entire drug distribution network . |
Inspecting manufacturing facilities (domestic and foreign) to ensure compliance with Good Manufacturing Practice (GMP) standards . |
Investigating counterfeit drug reports and collaborating with customs authorities to block illegal imports . |
Maintaining drug registration systems such as the NDC Directory and Drug Establishments Database . |
Educating consumers and healthcare providers about recognizing counterfeit medications . |
The FDA Drug Verification System allows healthcare professionals, distributors, and consumers to confirm product legitimacy by searching for information such as manufacturer name and registration details, product approval status, active ingredients and dosage form, and labeling and packaging information . These resources are essential for pharmaceutical traceability and can identify unapproved or suspicious drugs before they reach consumers . |
The penalties for DSCSA violations are severe: up to a year in prison and a $1,000 fine for a first violation, up to $3,000 and three years for subsequent offenses, and potential fines, imprisonment, and license suspension or revocation for failure to meet system requirements or implementation deadlines . These penalties are written into the law itself, with little FDA enforcement discretion . |
|
The Technology Behind Pharmaceutical QR Codes |
QR codes used in pharmaceutical serialization typically use high error correction levels to ensure readability even if the packaging is damaged. The unique product identifier (UPI) encoded in the QR code is protected by the same Reed-Solomon error correction that we explored in Chapter 4. |
The data payload in a pharmaceutical QR code is relatively small---typically 30 to 50 alphanumeric characters---but it is critical. The National Drug Code, serial number, lot number, and expiration date must all be encoded accurately. The serial number itself is a randomly generated or sequentially assigned number that is unique to each package. |
The data is stored in the QR code using Alphanumeric mode (for the NDC and lot number) or Numeric mode (for the serial number), as discussed in Chapter 9. The choice of mode affects the code's size and, therefore, its printability on small drug packages. |
The QR codes are typically printed using high-resolution thermal transfer or laser printing to ensure sharp edges and high contrast. The labels themselves often include tamper-evident features---a security seal that breaks if the label is removed---providing physical security in addition to digital verification. |
The Role of Blockchain in Drug Authentication |
Blockchain technology is increasingly being integrated with QR codes to provide immutable verification of drug provenance. As industry analysis notes, 'blockchain-integrated QR code stickers witnessed 28% adoption growth in 2024 alone' . The technology's immutable record-keeping capability complements physical security stickers, creating comprehensive protection systems . |
The MediLedger network, discussed above, is one example of a blockchain-based solution for the pharmaceutical supply chain. The network uses a private, permissioned blockchain where only trusted participants---manufacturers, wholesalers, health systems, and regulators---can access and verify data. |
|
The advantages of blockchain for drug authentication include: |
Immutability: Once a transaction is recorded on the blockchain, it cannot be altered or deleted, providing a permanent audit trail. |
Transparency: All participants in the supply chain can see the same data, reducing disputes and errors. |
Security: The decentralized nature of blockchain makes it resistant to hacking and tampering. |
Efficiency: Automated smart contracts can verify authenticity and trigger actions without manual intervention. |
As industry experts project, 'blockchain-integrated authentication to capture 35% of the market by 2028, particularly in pharmaceuticals and luxury goods where provenance verification is critical' . |
Practical Verification Methods for Patients |
Patients have several practical ways to verify the authenticity of their medications using QR codes : |
1. Check the packaging: Look for tamper-evident seals, proper labeling, and intact barcodes or QR codes. |
2. Scan the QR or data matrix code: Use official verification apps or systems to confirm the serial number and product details. |
3. Verify with the FDA database: Cross-check the product's NDC number or manufacturer information on the FDA's website. |
4. Purchase from licensed pharmacies: Avoid online or unauthorized sellers that may distribute counterfeit products. |
5. Consult a healthcare provider: If the medication looks or feels different than usual, confirm with a doctor or pharmacist before use. |
The Purdue University edible QR code technology promises to take this a step further, enabling patients to verify their medication by scanning a QR code directly on the pill itself . |
|
Economic Impact of Counterfeit Drugs |
The economic impact of counterfeit drugs is staggering. According to the U.S. Anti-counterfeiting Sticker Market Research Report, 'counterfeit drugs cause estimated annual losses exceeding $200 billion globally' . The pharmaceutical sector accounts for nearly 38% of total demand for anti-counterfeiting technologies . |
The costs extend beyond financial losses. Counterfeit drugs cause serious harm to patients, including adverse reactions, treatment failure, and death. They erode trust in the healthcare system and in legitimate pharmaceutical companies. They also create a hidden economy that funds other criminal activities. |
The DSCSA is designed to address these risks by creating a transparent, verifiable supply chain. As industry expert Dr. Valerie Bandy, a pharmacist and senior director of pharmacy solutions at Tecsys, explains: 'There's a major problem with diversion; you can go into almost any healthcare system, and I guarantee within the last year they've had at least one case of a staff member diverting medication onto the street or ingesting it themselves' . Narcotics and high-value medicines are common targets, with entire trucks getting hijacked and products stolen and resold, sometimes cut with inactive or harmful ingredients to add volume and profits or stored improperly before being resold to a hospital or clinic . |
Challenges and Future Directions |
Despite the progress made under the DSCSA, significant challenges remain. Signals from industry suggest problems ahead. The HDA member survey released in early 2023 showed that fewer than a third of manufacturer respondents were able to send serialized data to their distribution partners, and half of distributors were receiving incomplete data on full product lines . |
The complexity of the system is also a concern. A typical WMS (Warehouse Management System) solution might support lot control and serialization but not necessarily a nested structure of serial numbers within serial numbers. A pharmacy may need to track the pill count in each bottle, while the WMS is only tracking the lowest unit of measure, such as the serialized bottle . |
Looking ahead, several innovations promise to enhance pharmaceutical anti-counterfeiting: |
Edible QR Codes: Purdue University's edible, invisible QR codes for on-dose authentication . |
AI-Integrated Verification: Automated systems that use AI to detect anomalies in the supply chain. |
IoT-Enabled Packaging: Smart packaging that monitors temperature, humidity, and handling conditions. |
Blockchain Integration: Further development of blockchain-based verification networks . |
|
Detailed Closing Summary |
Let us now consolidate everything we have covered in this chapter, reflecting on the significance of QR codes in pharmaceutical anti-counterfeiting. |
The Drug Supply Chain Security Act (DSCSA), enacted in 2013 and fully implemented in 2023-2024, establishes a national chain of custody for prescription drugs in the United States . Every prescription drug package must carry a unique 2D matrix barcode---effectively a QR code---encoding the National Drug Code, unique serial number, lot number, and expiration date . This serialization system enables end-to-end traceability from manufacturer to dispenser, with each party in the supply chain responsible for 'one-up, one-back' verification . |
McKesson Corporation has been a leader in DSCSA implementation, having worked since 2015 to implement serialization infrastructure . Through McKesson Connect, customers can access serialized data and maintain the required six-year record retention . The scale is immense: every product package in the United States has a unique serial number, creating millions of data points that must be tracked and verified. |
MediLedger, a San Francisco-based company, operates a blockchain-based network for life sciences transactions . The company partners with major health systems including Prisma Health, OSF HealthCare, and Baptist Health to streamline contract management and enhance transparency . While primarily focused on pricing, the same blockchain infrastructure supports drug authentication and anti-counterfeiting, with blockchain-integrated solutions showing 28% adoption growth in 2024 . |
Purdue University researchers have developed edible, invisible QR codes printed on medication doses . This technology enables patients to personally verify their medication by scanning a QR code directly on the pill. The codes use biosafe inks and silk fibroin sheets, are camouflaged from the naked eye, and are readable by standard smartphone cameras . |
The FDA enforces DSCSA regulations, inspects manufacturing facilities, maintains drug registration systems, and educates consumers and healthcare providers . Penalties for violations include imprisonment and fines . |
The economic impact of counterfeit drugs is staggering, with estimated annual losses exceeding $200 billion globally . Recent FDA crackdowns have accelerated adoption of anti-counterfeiting technologies, with pharmaceutical companies increasing security implementation by 22% year-over-year . |
The future of pharmaceutical anti-counterfeiting lies in the integration of QR codes with blockchain technology, IoT-enabled packaging, and AI-based verification systems. Purdue's edible QR codes point toward a future where every patient can personally verify the authenticity of their medication . |
For the consumer, the QR code on a prescription drug package is a guarantee of safety---a small square that represents a complex system of regulation, technology, and accountability designed to ensure that the medication they are taking is genuine, safe, and effective. For the pharmacist, it is a tool for verifying the 'Six Rights' of medication administration. For the regulator, it is a window into the supply chain, enabling rapid response to threats and protecting public health. |
cs@easiersoft.com