As an example of this, including some anti-deep-linking provisions, and in fact using bar code as well, take a look at my column from a few years ago.

For another trick, if the images will be referenced frequently and must be cached, consider my 404 handler to populate an icon directory.