The pam_cuecat module reads decoded bar codes from /dev/scanners/cuecat, looks up the username:barcode_type:barcode line in /etc/cuecatpasswd, and returns whether or not this user has been authenticated.