The article says each SKU gets its own codes (and my understanding is that Amazon maintains SKU metadata internally and all resellers sell against it). My guess would be a variation of skuUUID:itemUUID:sha1(skuUUID+itemUUID+skuSecret), encoded as a QR code. UUID could be a smaller int ID, hash could be a base64 encode if you need to save space.