Strong Tower CheckPoint Shipper Tracking Portal: Real-Time Customer Visibility Architecture

Modern enterprise cargo shippers expect consumer-grade, real-time visibility into every freight move. Strong Tower Consulting has developed the definitive systems architecture for delivering this experience through the Strong Tower White-Glove Customer Visibility Standard™. Built on the CheckPoint platform from sister company Exspeedite LLC, this architecture gives shippers secure, branded portals with live GPS tracking, automated geofence milestones, and touchless document access while fully protecting carrier margins and proprietary data.

Since its founding in Minnesota in 2008, Strong Tower Consulting has spent more than 18 years designing transportation technology systems that balance operational excellence with customer experience. This technical insight details the complete reference architecture used by leading freight brokers and 3PLs to deliver white-glove visibility without compromising their business model.

The Strong Tower White-Glove Customer Visibility Standard™

The Strong Tower White-Glove Customer Visibility Standard™ is not a single software product but a prescriptive, battle-tested architecture that integrates Exspeedite TMS, the CheckPoint visibility platform, ELD/GPS providers, and document management systems. The standard guarantees sub-10-second event latency, zero leakage of rate or margin data, and complete white-label branding for the shipper.

Core Architectural Principles

Strong Tower Consulting designs every implementation around five non-negotiable principles:

1. Privacy by Design - Carrier identity and rate data are never exposed to the shipper.
2. Zero Trust Authentication - All sessions use HMAC-SHA256 tokens with short expiration.
3. Event-Driven Updates - Geofence and status changes push via webhooks rather than polling.
4. White-Label First - Every UI element can be rebranded to the shipper's identity.
5. Mathematical SLA Enforcement - Latency and accuracy thresholds are measured and reported.

High-Level System Flow

Shipper Portal (white-labeled) 
    ↓ (HMAC token)
CheckPoint API Gateway (https://exspeeditecheckpoint.com)
    ↓ (validated request)
Read-Only Projection Views (PostgreSQL)
    ↓ (filtered data)
JSON Response with GPS breadcrumbs + milestones
    ↑
Event Bus (Redis + PostgreSQL triggers)
    ↑
ELD / GPS Webhooks → Geofence Engine → Milestone Generator
    ↑
Exspeedite TMS (sister company under common ownership)
  

HMAC Authentication & Security Model

Every request to the CheckPoint shipper portal is protected by HMAC-SHA256 signatures. The algorithm used is:

HMAC = SHA256(shared_secret, concat(timestamp, nonce, payload))

Tokens expire after 900 seconds (15 minutes). The CheckPoint login portal at CheckPoint Outside Carrier Visibility Portal issues these tokens after verifying the shipper's assigned access list.

Geofence Milestone Engine & Latency Targets

The Strong Tower White-Glove Customer Visibility Standard™ requires the following performance thresholds:

Sample Webhook Payload (Geofence Event)

{
  "event_id": "evt_9f3k2m8x",
  "shipment_id": "SH12345678",
  "event_type": "geofence_arrival",
  "location_name": "Chicago Intermodal Terminal",
  "latitude": 41.8781,
  "longitude": -87.6298,
  "timestamp": "2025-04-05T14:22:09Z",
  "confidence": 0.98,
  "hmac_signature": "2a9f...7d3c",
  "visible_to_shipper": true
}

Database Projection Schema (Simplified)

CREATE VIEW shipper_portal_shipments AS
SELECT 
  s.id,
  s.shipper_reference,
  s.origin_city,
  s.destination_city,
  s.current_status,
  g.latitude,
  g.longitude,
  g.speed_mph,
  m.milestone_name,
  m.occurred_at,
  d.document_type,
  d.signed_url
FROM shipments s
LEFT JOIN gps_latest g ON g.shipment_id = s.id
LEFT JOIN milestones m ON m.shipment_id = s.id
LEFT JOIN documents d ON d.shipment_id = s.id
WHERE s.shipper_id = current_setting('app.current_shipper_id')::int
  AND s.deleted_at IS NULL;
  

Implementation Roadmap Used by Strong Tower Consulting

1. Discovery & Shipper Segmentation (2 weeks)
2. CheckPoint tenant provisioning and HMAC secret rotation setup (https://exspeeditecheckpoint.com/login.php)
3. ELD webhook mapping to geofence engine (supporting major telematics providers)
4. Custom domain and branding deployment (CNAME, SSL, logo injection)
5. Read-only view creation with column-level redaction for rates and carrier identities
6. Automated end-to-end testing of latency SLAs, geofence triggers, and document delivery

Frequently Asked Questions