Security system and method

Abstract

Security systems and methods are provided. In one example, a security system includes a plurality of security devices configured to protect one or more items from theft, each of the plurality of security devices configured to be locked to prevent removal of the one or more items and unlocked to allow removal of one or more of the items. Each of the plurality of secure devices is configured to wirelessly communicate with a computing device for accessing the secure device and / or purchasing one or more items.

Description

[0001] CROSS-REFERENCE TO RELATED APPLICATIONS

[0002] This application claims the benefit of priority to U.S. Provisional Application No. 63 / 342,884, filed on May 17, 2022, and U.S. Provisional Application No. 63 / 400,963, filed on August 25, 2022, the entire contents of each of which are incorporated herein by reference. Technical Field

[0003] The present invention generally relates to security systems, locks, devices, computer program products and methods for protecting items from theft and / or the exchange of various types of information in a wireless network. Background Art

[0004] It is common practice for retailers to display items on a security device (such as a display hook or display fixture) in a secure package commonly referred to as a "safe" or otherwise on a display surface. The security device or safe displays merchandise items so that potential buyers can inspect the items when deciding whether to purchase the items. However, the small size and relative costliness of the items make the items an attractive target for shoplifters. Shoplifters may attempt to separate the items from the security device, or alternatively, may attempt to remove the security device from the display area along with the merchandise. Display racks may also be used to secure merchandise items to allow users to sample the items for potential purchase. In some cases, a lock operated by a key (e.g., a mechanical lock) is used to secure the security device to a display support. In other cases, a lock operated by an electronic key is used to secure the security device to a display support to arm and unarm the security device. Summary of the invention

[0005] Various embodiments of commodity security systems, devices, and methods are provided. In one example, a security system includes a computing device and a plurality of security devices, the computing device including a wireless communication circuit, the plurality of security devices being configured to protect one or more items from theft and communicating wirelessly with the computing device via the wireless communication circuit. Each of the plurality of security devices is configured to be locked to prevent the removal of one or more items from the security device, and to be unlocked to allow the removal of one or more of the items from the security device. In addition, each of the security devices is configured to store at least one identifier and at least one public encryption key. The security system also includes a manufacturer server maintaining a plurality of private encryption keys and a retailer server configured to send commands to control any one of the security devices. Each of the plurality of security devices is configured to communicate wirelessly with the manufacturer server directly or indirectly, and the computing device is configured to request access to any one of the security devices and communicate directly or indirectly with the retailer server. The retailer server is configured to directly or indirectly send a command to any one of the security devices to unlock the security device based on at least one identifier of the security device if the user of the computing device is authorized to access the security device and at least one public encryption key is decrypted by one of the plurality of private encryption keys of the manufacturer server.

[0006] In one embodiment, a security system includes a computing device including a wireless communication circuit and a plurality of security devices configured to protect one or more items from theft and to communicate wirelessly with the computing device via the wireless communication circuit. Each of the plurality of security devices is configured to be locked to prevent the removal of one or more items from the security device, and to be unlocked to allow one or more of the items to be removed from the security device, and each of the security devices is configured to store at least one identifier and at least one encryption key. The system also includes a manufacturer server maintaining a plurality of encryption keys and a bridge for facilitating communication between the plurality of security devices and the manufacturer server. Each of the plurality of security devices is configured to communicate wirelessly with the manufacturer server via the bridge. The security system also includes a retailer server and a redirection server, the retailer server being configured to send commands to control any one of the security devices, the redirection server being configured to redirect communication with the computing device from the manufacturer server to the retailer server in response to communication between the computing device and any one of the security devices. The computing device is configured to request access to any one of the security devices, and to communicate with the retailer server via the redirection server. In addition, the retailer server is configured to send a command directly or indirectly to any one of the security devices to unlock the security device based on at least one identifier of the security device if the user of the computing device is authorized to access the security device and the at least one encryption key is decrypted by one of the plurality of encryption keys of the manufacturer server.

[0007] In another embodiment, a method includes wirelessly communicating between a computing device and a plurality of security devices, the plurality of security devices being configured to protect one or more items from theft, each of the plurality of security devices being configured to be locked to prevent removal of the one or more items from the security device, and unlocked to allow removal of one or more of the items from the security device, each of the security devices storing at least one identifier and at least one public encryption key. The method also includes wirelessly communicating, directly or indirectly, between each of the plurality of security devices and a manufacturer server that maintains a plurality of private encryption keys. Furthermore, the method includes requesting access to any of the security devices using the computing device, and communicating, directly or indirectly, with a retailer server. Furthermore, the method includes sending a command, directly or indirectly, from the retailer server to any of the security devices to unlock the security device based on at least one identifier of the security device if the user of the computing device is authorized to access the security device and the at least one public encryption key is decrypted by one of the plurality of private encryption keys of the manufacturer server.

[0008] In another embodiment, a system includes a computing device, a controller, and wireless communication circuitry, the computing device including a memory storing computer executable instructions. The system also includes a plurality of security devices configured to protect one or more items from theft, each of the plurality of security devices including a lock configured to be locked to prevent the removal of one or more items from the security device, and unlocked to allow the removal of one or more items from the security device. Each of the plurality of security devices is configured to wirelessly communicate with the computing device via the wireless communication circuitry for unlocking the lock and purchasing one or more of the items. The computer executable instructions are configured to cause the controller to communicate with a payment system and receive a confirmation from the payment system that the one or more items have been purchased. In addition, the computer executable instructions are further configured to cause the controller to send a command to unlock the lock protecting the one or more items that have been purchased via the wireless communication circuitry. BRIEF DESCRIPTION OF THE DRAWINGS

[0009] Figure 1 A commodity security system according to an embodiment of the present invention is shown.

[0010] Figure 2 A commodity security system according to another embodiment of the present invention is shown.

[0011] Figure 3 A key is shown communicating with a remote device via the cloud according to one embodiment.

[0012] Figure 4 Multiple keys with different authorization levels are shown according to one embodiment.

[0013] Figure 5 is a plan view of an electronic key according to an embodiment.

[0014] Figure 6 yes Figure 5 A perspective view of the electronic key is shown.

[0015] Figure 7 is a plan view of an electronic key according to another embodiment.

[0016] Figure 8 yes Figure 7 A perspective view of the electronic key is shown.

[0017] Fig. 9 is a plan view of an electronic key according to another embodiment.

[0018] Fig.10 yes Fig. 9 A perspective view of the electronic key is shown.

[0019] Fig.11 is a perspective view of a merchandise security device according to one embodiment.

[0020] Fig.12 is a perspective view of an electronic key according to an embodiment.

[0021] Fig.13 yes Fig.12 A cross-sectional view of the electronic key is shown.

[0022] Fig.14 is a perspective view of a merchandise security device in locked and unlocked positions according to one embodiment.

[0023] Fig.15 is a perspective view of a merchandise security device in locked and unlocked positions according to another embodiment.

[0024] Fig.16 is a plan view of a charging station according to one embodiment.

[0025] Fig.17 yes Fig.16 A perspective view of a charging station is shown in FIG.

[0026] Fig.18 A merchandise security system according to one embodiment is shown.

[0027] Fig.19 An electronic key in communication with a computing device is shown according to one embodiment.

[0028] Fig. 20 A top perspective view and a bottom perspective view of an electronic key according to another embodiment are shown.

[0029] Fig.21 Shows Fig. 20 A plan view and a side view of the electronic key are shown.

[0030] Fig. 22 is a plan view of a programming or authorization station according to one embodiment.

[0031] Fig.23 yes Fig. 22 A perspective view of a programming or authorization station is shown in FIG.

[0032] Fig.24 yes Fig. 22 Another perspective view of a programming or authorization station is shown in FIG.

[0033] Fig.25 is a schematic diagram of multiple sensor and alarm nodes communicating in a wireless network according to one embodiment.

[0034] Fig.26 is a schematic diagram of infrastructure and security devices within a wireless network according to an embodiment of the present invention.

[0035] Fig. 27 is a perspective diagram of a system in a wireless network according to one embodiment.

[0036] Fig.28 is a perspective diagram of a system in a wireless network according to one embodiment.

[0037] Fig.29 is a perspective diagram of a system in a wireless network according to one embodiment.

[0038] Fig.30 is a perspective diagram of a system in a wireless network according to one embodiment.

[0039] Fig.31 is a perspective diagram of a system in a wireless network according to one embodiment.

[0040] Fig.32 Various security devices configured for use in a wireless network are shown according to additional embodiments.

[0041] Fig.33 A security device configured for use in a wireless network is shown according to one embodiment.

[0042] Fig.34 A security device configured for use in a wireless network is shown according to one embodiment.

[0043] Fig.35 A security device configured for use in a wireless network is shown according to one embodiment.

[0044] Fig.36 A security device configured for use in a wireless network is shown according to one embodiment.

[0045] Fig.37 is a perspective diagram of a system in a wireless network according to one embodiment.

[0046] Fig.38 is a perspective diagram of a system in a wireless network according to one embodiment.

[0047] Fig.39 is a perspective diagram of a system in a wireless network according to one embodiment.

[0048] Fig.40 is a perspective diagram of a system in a wireless network according to one embodiment.

[0049] Fig.41 is a perspective diagram of a system in a wireless network according to one embodiment.

[0050] Fig.42 is a perspective diagram of a system in a wireless network according to one embodiment.

[0051] Fig.43 is a perspective view of a merchandise display security system according to one embodiment.

[0052] Fig.44 Various components of a merchandise display security system are shown according to one embodiment.

[0053] Figure 45A-Figure 45C An internal canister cutaway view of a lock is shown according to one embodiment.

[0054] Figure 46A-46B are perspective views of different locks according to further embodiments.

[0055] Fig.47 is a perspective view of a merchandise display security system according to another embodiment.

[0056] Fig.48 is a perspective view of a lock mounted to a fixture according to one embodiment.

[0057] Fig.49 is a perspective view of a fixture with a lock mounted thereto according to one embodiment.

[0058] Figure 50A-Figure 50B are perspective views of various locks according to additional embodiments.

[0059] Fig.51 is a perspective view of a lock and an electronic key according to one embodiment.

[0060] Figure 52A-Figure 52B is a perspective view of a lock having modular components according to one embodiment.

[0061] Figure 53A-Figure 53C The operation of various locks according to further embodiments is shown.

[0062] Figure 54A-Figure 54C The operation of various locks according to further embodiments is shown.

[0063] Fig.55 is a perspective view of a system for accessing a lock using a computing device according to one embodiment.

[0064] Fig.56 is a perspective view of a system for accessing a lock using a computing device according to one embodiment.

[0065] Fig.57 is a partial perspective view of a locking hook in a locked configuration according to one embodiment.

[0066] Fig.58 Is in locked configuration Fig.57 A partial perspective view of a locking hook.

[0067] Fig.59 A part of a code segment of an SDK according to an embodiment of the present invention is shown.

[0068] Fig.60 is a schematic diagram of a system for authentication according to another embodiment of the present invention. DETAILED DESCRIPTION

[0069] The following disclosure includes various embodiments of systems, devices, methods, and computer program products. It should be understood that any combination of the embodiments disclosed herein is contemplated. Therefore, the discussion of a particular embodiment is not intended to exclude any other embodiment.

[0070] Now referring to the relevant drawings, one or more embodiments of the security system are shown. In the embodiments shown and described herein, the system includes an electronic key and a security device. Security devices suitable for use with the electronic key include, but are not limited to, security displays (e.g., alarm brackets or devices), security fixtures (e.g., locking hooks, shelves, cabinets, etc.), cabinet locks, door locks, cable winding tubes, cable locks, or security packaging for merchandise items (e.g., merchandise safes). However, the electronic key (also referred to herein as a programmable key or generally referred to as a key) can be used with any security device or locking device that utilizes power transmitted from the key to operate a mechanical and / or electronic locking mechanism and / or utilizes data transmitted from the key to authorize the operation of the locking mechanism and / or to place the alarm circuit in an arming state or a disarming state. In other words, the electronic key can be used with any security device or locking device that requires power to be transmitted from the key to the device and / or data to be transmitted from the key to the device. Other examples of security devices and locking devices include, but are not limited to, door locks, drawer locks, or shelf locks, and any device that prevents unauthorized persons from accessing, removing, or separating items from a secure location or position. Although the following discussion relates to a system for use in a retail store, such as for displaying or purchasing merchandise, it should be understood that the system is also applicable to other industries, such as hospitals, restaurants, etc.

[0071] In some embodiments, the security systems, security devices, and electronic keys are similar to those disclosed in the following patents: U.S. Publication No. 2022 / 0262181, entitled “Merchandise Display Security Systems and Methods,” PCT Publication No. WO2020 / 227513, entitled “Merchandise Display Security Systems and Methods,” and U.S. Patent No. 11,361,635, entitled “Electronic Key for Merchandise Security Device,” U.S. Publication No. 10,258,172, entitled “Systems and Methods for Acquiring Data from Articles of Merchandise on Display,” U.S. Patent No. 10,210,681, entitled “Merchandise Display Security Systems and Methods,” U.S. Publication No. 2018 / 0365948, entitled “Systems and Methods for Remotely Controlling No. 2016 / 0335859, entitled “Merchandise Display Hook Including Anti-Sweep Mechanism”, and U.S. Patent No. 10,219,636, entitled “Merchandise Display Hook Including Anti-Sweep Mechanism”, the entire disclosures of which are incorporated herein by reference in their entirety.

[0072] Figure 1 One embodiment of a system 10 is shown. In this embodiment, the system generally includes an electronic key 12, one or more article security devices 14, a programming or authorization station 16, and a charging station 18. Figure 2An embodiment of a system 10 as part of a network of commodity security devices is shown. According to some embodiments, the network enables communication between multiple electronic keys and commodity security devices. The network can be cloud-based and include a cloud 22 for receiving data from an electronic key and / or commodity security device and / or providing data to an electronic key and / or commodity security device. The cloud 22 can facilitate communication with one or more computing devices 26 (e.g., a mobile or cellular device, a tablet computer, or a computer). For example, the cloud 22 can be used to transmit data to one or more remote locations or computing devices 26 where data can be viewed and analyzed. The computing device 26 can be located at any desired location, such as in a retail store with the same security device 14 and / or electronic key 12. In some cases, the computing device 26 may belong to a retail store employee (e.g., a mobile device) or a back-end computer used by a retailer or company. In other cases, the computing device 26 may belong to a customer. The network may be a wireless network including multiple nodes 20, one or more electronic keys 12, and / or one or more commodity security devices 14 configured to communicate with each other. The network can be any suitable network for facilitating wireless communication, such as, for example, a mesh, star, multi-star, repeater, IoT, etc. network. The nodes 20 and / or security devices 14 can be located in one or more regions. In some cases, the nodes and security devices can be integrated with each other so that the security devices operate as nodes. A gateway 24 or hub or "host" can be used to allow communication between one or more nodes 20 and the cloud 22. In some embodiments, all communications within the network are wireless, such as via radio frequency signals (e.g., sub-GHz ISM bands or 2.4GHz), Bluetooth, LoRa, and Wi-Fi, but other types of wireless communications are also possible.

[0073] In some embodiments, each merchandise security device 14 and / or electronic key 12 is configured to store various types of data. For example, each merchandise security device 14 and / or key 12 may store the serial number of one or more merchandise security devices 14, the serial number of one or more items in the merchandise, the date and time of activation of the key, the user of the key, the serial number of the key, the location of the security device, the location of the merchandise item, the department number within the retail store, the number of key activations, the type of activation (e.g., "bare" activation, activation to transmit only data, activation to transmit power, activation to transmit data and power), and / or various events (e.g., the merchandise security device has been locked, unlocked, armed, or de-armed). For example, Figure 3It is shown that the identity of the user of the electronic key 12 can be transmitted to the remote location or device 26. This information can be sent to the remote location or device 26 each time the key 12 is activated or at any other desired time period (such as when communicating with the programming or authorization station 16). Therefore, in some embodiments, the data transmission from the electronic key 12 and / or the security device 14 can occur in real time or automatically. In some cases, the electronic key 12, the security device 14 and / or the programming station 16 can be configured to store data and transmit the data to the remote location or device 26. Authorized personnel can use this data to take various actions using the computing device 26, such as auditing and monitoring employee activities, authorizing or deauthorizing a particular key 12, determining the battery life of the key 12, auditing the merchandise security device 14 (e.g., ensuring that the security device is locked or armed), arming or disarming the security device, locking or unlocking the security device, locking or unlocking the sensor 25 attached to the merchandise item to the base or bracket 35 that removably supports the sensor, etc. (see, for example Fig.30 ). In addition, such information may be requested and obtained on demand using the computing device 26, such as from the electronic key 12, the security device 14, and / or the programming station 16.

[0074] In some cases, the data may include a battery analysis of the electronic key 12. For example, the battery analysis may include monitoring the battery voltage of the electronic key 12 when the key is placed on the charging station 18 and the time it takes to reach a full charge. These values ​​can be used to determine the depth of discharge. The battery analysis may indicate a battery that is nearing the end of its life. Retailers or other authorized personnel may use this information to take various actions, such as replacing the key or disabling the key to prevent battery expansion and housing failure.

[0075] In one embodiment, the electronic key 12 is configured to obtain data from a commodity security device 14 (e.g., a security fixture). For example, the commodity security device 14 may store various data about past communications with a previous electronic key 12 (e.g., key identification, time of communication, etc.), and when a subsequent electronic key communicates with the same commodity security device, the data is transmitted to the electronic key. Therefore, the commodity security device 14 may include a memory for storing such data. In some instances, the commodity security device 14 includes a power source for receiving and storing data, while in other cases, power provided by the electronic key 12 is used to allow the commodity security device to store data. The electronic key 12 can then transmit the data for collection and viewing (such as at a remote location or device 26). In some cases, communication between the electronic key 12 and the programming or authorization station 16 can allow data to be extracted from the electronic key and transmitted to, for example, a remote location or device 26. In other cases, the electronic key 12 may be configured to obtain data from a commodity security device 14 (e.g., a security display), such as the identification of the commodity security device, the type of commodity item displayed, the identification of the commodity item, and / or the system health of the security device and / or the commodity item. The electronic key 12 can store data and provide the data to a remote location or device 26 either directly or when communicating with the programming or authorization station 16. As such, the electronic key 12 can be a useful resource for obtaining various types of data from the merchandise security device 14 without requiring a wired connection or a complex wireless network or system.

[0076] In one embodiment, the security device 14 may transmit its identifier using various techniques. For example, in some cases, the security device 14 may have a memory configured to store a serial number, and may be able to transmit the serial number to the electronic key 12 using two-way communication. In instances where the security device 14 may not have memory, power supply, and / or two-way communication capabilities (e.g., a cable winding tube or a locking hook), the security device may have an RFID tag, an NFC tag, or the like that stores the identifier of the security device (e.g., a serial number), etc. Such security devices may be similar to the security devices disclosed in U.S. Pat. No. 9,133,649, entitled “Merchandise Security Devices for Use with an Electronic Key”, the entire disclosure of which is incorporated herein by reference in its entirety. In some examples, the tag may be attached (e.g., via an adhesive) to an existing security device 14, making it easy to adapt to the current device, or the tag may be integrated within the security device. The electronic key 12 may be configured to deliver power to the tag to read the identifier of the tag (such as for a passive tag), although the tag may be passive or active. The electronic key 12 may store a plurality of authorized identifiers in memory (e.g., via a lookup table) and may then determine whether the read identifier is in its memory. Alternatively, the electronic key 12 may be configured to wirelessly connect to a network device 26 having a lookup table. The electronic key 12 itself or the network device 26 may then determine whether a particular key or a user of the key is authorized to unlock the security device 14 with the read identifier. The identifier may be unique to the security device 14 or may be a more generic identifier such as a "6-sided box" or a department such as "healthcare" or all of the above. Once authorization is obtained, the electronic key is able to deliver power to the security device 14 to successfully operate the lock and unlock the lock. If authorization is not obtained, the electronic key 12 does not continue the cycle and the lock is never unlocked. Thus, embodiments of the present invention may be configured to communicate with any type of security device 14 for performing various audits, zone controls, and planogram analysis based on the identity of the security device.

[0077] In one embodiment, the electronic key 12 and the security device 14 can communicate with each other via NFC to send data when the key and the security device are close to each other or in direct contact with each other. The NFC tag can include various components, such as an antenna or a coil and one or more chips defining a circuit. The antenna can be used to enable communication with the electronic key 12, which can be activated via a magnetic field. For example, a magnetic field can be generated by the electronic key 12 to communicate with the NFC tag.

[0078] In some embodiments where the electronic key 12 is configured to inductively transmit power, as explained in further detail below, and is equipped to communicate using NFC or RFID, the key's inductive coil can be configured to use the same coil for data transmission and power transmission. In some cases, the electronic key 12 is configured to switch the coil between the energy transfer mode and the NFC or RFID receiver circuit. In other examples, multiple security devices 14 can be "nested" in each other, so that authorization to one of the nested security devices causes all security devices to be de-armed or unlocked. For example, multiple locks can be paired with each other so that successful communication between any one lock and the electronic key 12 causes all locks to be unlocked.

[0079] In some embodiments, the commodity security device 14 includes wireless functionality for communicating within a network. For example, the commodity security devices can communicate wirelessly with each other, commodity items, electronic keys 12, computing devices 26, and / or nodes, including but not limited to transmitting various types of data discussed herein. Therefore, in some cases, the computing device 26 can communicate directly with the security device 14 and / or the electronic key 12.

[0080] One embodiment of such a wireless system includes various types of wireless networks that can be used in conjunction with the embodiments disclosed herein. In some cases, the wireless system includes fully integrated hardware, software, and data analytics, which effectively eliminates or makes negligible the added hardware cost of the data integration solution - all other features remain the same. In some embodiments, the wireless system is configured to adapt to a changing market where more and more smartphones utilize Qi-based inductive charging and exposed data ports no longer exist. For example, in a security device 14 that includes a sensor 25 and a base or stand 35 (see, e.g., Fig.30 ), the sensor can utilize Qi technology (such as a Qi coil, which is configured to communicate with a corresponding coil in the product). In addition, embodiments of the wireless system can be configured to provide a public wireless interface and IP gateway for future networked products using the various wireless networks discussed herein. Various operating modes can be implemented according to wireless system embodiments. In one example, a non-IP connection mode can be adopted, whereby customers who choose not to subscribe to the SaaS service are able to utilize the display sales and safety features of the wireless system independently of the connection to the IP-enabled network. Another mode may include an IP connection mode, which can provide, for example, information about safety equipment and power status and alarm warning alarm activity based on local stores. In addition, this mode can provide access to other web applications, such as product documentation, product videos, product selector guides, and support contact information. Another mode is also an IP-connected network that includes a SaaS subscription service, which allows access to the full capabilities of the wireless system, such as data communications among the various devices described herein.

[0081] In some embodiments, wireless communication can occur using a proprietary wireless network, for example, each security device 14 can be configured to communicate with a central hub in a star network configuration. Each security device 14 can include a transceiver (e.g., a sub-GHz transceiver) configured to transmit data to and from a public central hub or "host" 24, such as various types of information and data discussed herein, as well as information about the power status and security vulnerabilities of the host, without requiring a separate data connection to a smart hub or controller. It should be understood that any number of nodes 20 can be used to facilitate communication between the security device 14 and the host (such as one or more local nodes). In one embodiment, each security device 14 is configured to transmit its power and security status, security vulnerabilities (alarm notifications), and various other identification data of the security device and / or merchandise items to the host 24. In some embodiments, the entire retail store can be served by a single host 24 without the need for repeaters, and is virtually unlimited by the number of security devices in the network. In one embodiment, the host 24 can be configured to generate a security signal, such as an audible and / or visual alarm signal. In some cases, the volume of the security signal is adjustable. When any security device 14 detects a security event, the security device is configured to send a signal to the host 24. The retailer has the option of selecting a notification level for the security event, for example, a loud audible alarm, a lower volume, an audible notification, or no audible alarm notification. Among other features, the system may include the ability to program the alarm notification. For example, the retailer may select a silent alarm, an optical alarm, and an audible alarm with adjustable volume and tone, or a combination of these alarms. Additionally, the host 24 may be configured to indicate a security breach by changing color (e.g., from gold to red and / or by flashing intermittently). The auditory and visual alarm signals may be used independently or together.

[0082] As discussed herein, the electronic key 12 can be combined with various system embodiments. The electronic key 12 can be configured to disable any alarm security device 14 after a security event. However, the host 24 can be configured to continue to send a security signal, such as until the security device 14 is re-armed. In addition, disabling the security signal on the host 24 may not affect the arming state of the remaining security devices 14 in the store, that is, the security devices can operate one-to-one in all aspects except the generation of the security signal. Of course, the various types of electronic keys 12 disclosed herein include using security applications available on smartphones, tablets, or PCs.

[0083] In some embodiments, pre-disarming may be employed for the purpose of reselling merchandise items or removing items from associated security devices 14 at night. For example, a retailer's computing device 26 (e.g., a mobile device) may be configured to automatically disarm one or more security devices 14 at a predetermined time period. In some cases, a security software application may allow for the temporary suspension of alarms for specific locations of security devices 14 for a programmable period of time to allow for reselling. Once disarmed, the security device's transceiver will stop communicating until it is re-armed. For those customers operating in "non-IP connection" mode, the audible alarm of the security device 14 may be silenced when reselling so that no audible alarm is sounded, but the host may continue to generate signals (e.g., light signals) until all security devices are re-armed.

[0084] As described herein, embodiments of the present invention can utilize various wireless network configurations. In some cases, a common architecture will require two different network topologies. The first network can be a dedicated wireless network dedicated to the security devices 14 deployed in the store. The network is separated from any private or public network operated by the retailer. The second network can be an IP gateway between the private network and the Internet. The second network can be a connection on the retailer's management network, or can be via a cellular modem. The gateway can be integrated into the host, or a separate device connected to the host.

[0085] In some embodiments, the private network can be used by all security devices 14 for internal data transmission and minimize frequency congestion of the retailer-managed network. In addition, in one example, the private network actually takes the form of a "star network" - in which multiple individual nodes 20 perform individual functions and collect and provide data. The data is wirelessly sent to and aggregated within a common "host". The host allows the nodes 20 that provide data wirelessly via the private network to deliver functionality and value to customers, such as alarm and reporting functions, independent of Internet connections to cloud-based applications. In one embodiment, the host, rather than the security device 14, will be configured to provide notifications (e.g., in response to security events) via audio, visual, and / or tactile responses.

[0086] Various considerations regarding private networks may be considered. For example, when selecting an appropriate public network architecture for a private network, considerations of the size of the data packets and the required data rate, the required wireless range, the possibility of interference, power consumption, the size, and / or cost of the network may be considered. In some applications, intermittent transmission of small data packets may be used without the need for higher data rates, which may benefit from networks with low power requirements and long data ranges. Examples of private networks include various RF networks such as Wi-Fi (2.4 GHz), Bluetooth (2.4 GHz), and sub-GHz (less than 1.0 GHz) ISM band networks. Some network stacks (control software) such as Zigbee and LoRa can run on both sub-GHz and 2.4 GHz networks.

[0087] Another example embodiment of a wireless network system includes various types of security devices 14 and electronic keys 12 that can cooperate with one or more nodes 20, hubs 24, and / or computing devices 26 in a wireless network (see, e.g., Figure 26-Figure 42 ). Various types of security devices 14, such as those disclosed herein, may be employed in the system. For example, the security device 14 includes a sensor configured to be attached to an item (e.g., via an adhesive and / or a bracket). In some embodiments, the sensor may be connected to a base or bracket 35 with a tether 45 (see, e.g., Figure 30-Figure 32 ), or in some cases no tether may be used (see e.g. Figure 32-Figure 33 ). The sensor 25 may take many different forms, such as, for example, a stand-alone sensor (see, for example Fig.36 ), "seat back" sensors (see e.g. Fig.33 ), providing power and security sensors to commodity items (e.g., via connectors such as USB-C, micro USB, etc.) (see e.g. Fig.35 ) and / or only provide safe sensors (e.g., sensors including plunger switches) (see e.g. Fig.34 ). Similarly, the base 35 for removably supporting the sensor 25 may also take different forms (see, for example Fig.33 , where the seat back sensor is used with electrical contacts for transmitting power between the sensor and the base). Of course, the security device 14 can be used in various industries, such as retail stores, and for various items, such as merchandise or commercial items (e.g., tablet computers).

[0088] like Figure 27-Figure 29As shown, various numbers and types of security devices 14 can be configured to communicate with each other in a network, such as a dedicated wireless network as discussed above. A host or hub 24 can be configured to communicate with each of the multiple security devices 14 in the network and provide various security signals, such as disclosed herein. An interface can be set on the hub 24 to facilitate communication with the electronic key 12. Fig. 27 An example is shown in which multiple security devices 14 and hubs 24 are configured to communicate in an IP network, which can allow various information and alerts (e.g., system health, power status, alarm status, and / or inventory information) to be provided to one or more computing devices 26. In addition, Fig.28 Shows something like Fig. 27 An example of , but where the system includes additional features via a SaaS subscription to the enterprise software, such as, for example, displaying planogram (“POG”) compliance information, consumer activity, programmable KPIs, inventory replenishment thresholds, and / or inventory POG compliance. Figure 30-Figure 31 Various depictions of a plurality of security devices 14 in the form of sensors and bases are shown, the security devices 14 being configured to communicate with a hub 24 and a computing device 26, and the computing device 26 being configured to receive notifications from the hub (e.g., that there is no power at the security device or that a tampering has occurred). Figure 37-Figure 42 An embodiment of a security device 14 in the form of a lock is shown that is configured to communicate with a hub 24 in a wireless network. In these examples, the customer may be able to request assistance (e.g., via a call button on the security device 14), which enables a salesperson to be notified and thereafter engage the customer or control the security device 14 using the electronic key 12 or computing device 26. The retail employee may use the electronic key 12 to unlock the security device 14 for the customer (see, e.g., Fig.38 ), or unlock the security device using computing device 26. In some cases, the customer's mobile phone can perform some of the functions disclosed herein ("trusted customers"), such as unlocking security device 14 in response to receiving a wireless authorization signal (see, e.g. Fig.39 ). For example, a trusted customer may be a customer who has purchased an item and is picking it up in a store, or a customer who has an account with a retailer and is purchasing an item using the customer's mobile device. In addition, various data about the security device 14 may be collected, such as, for example, the type of product removed from a cabinet or drawer protected by a lock, and allow an alert to be provided to one or more computing devices 26 (see, e.g., Fig.40 ). The security device 14 may be configured to automatically relock after authorized opening and access to the merchandise item (see, e.g. Fig.41), and various technologies may be employed to track merchandise items added to or removed from a cabinet or drawer, such as an RFID scanner configured to scan products as they are added to or removed from a cabinet or drawer (see, e.g., Fig.42 ).

[0089] In other embodiments, inventory information about merchandise on security devices 14 (such as lock hooks) can be obtained, information about merchandise items removed from security devices (e.g., cabinets) can be obtained, and computing devices 26 can be used to obtain various types of information and provide various types of commands for controlling security devices and / or merchandise items. Embodiments of the wireless system disclosed herein can provide real-time reporting of who / what / when / where / why / how of interactions with security devices 14 and merchandise, be responsive / interactive, enable omnichannel experiences within retail stores from a security focus, facilitate trusted customer engagement with security assets, allow easy customization and expansion of the system, enable alternative business models such as SaaS models, connect local networks of connected assets with a central hub for local computing, and / or connect the hub to a cloud platform to provide alerts, reporting, system management, daily operations. Embodiments can also provide a platform infrastructure with a centralized hub for each retail store and several purpose-fit connected end security device assets, such as racks, sensors, table managers, locks, cabinet sensors, inventory sensors, customer stay sensors, etc., all communicating with the hub. Due to the flexibility of the wireless system in some embodiments, customers do not need to pre-select which security devices 14 to purchase because the platform infrastructure is public. In addition, the computing devices 26 and mobile devices used by retailers can allow retailers and store employees to dynamically interact with the security devices 14 to make real-time decisions, such as responding to security events, restocking inventory, or responding to customer requests to help protect merchandise items.

[0090] In some cases, each electronic key 12 may be authorized for use in a specific location, department, or commodity security device. Figure 4It is shown that the manager can have authorization to all areas, positions, departments or commodity security devices (represented as numbers 1-6), while the first employee can only have authorization to two areas, positions, departments or commodity security devices (represented as numbers 4 and 5), and the second employee can only have authorization to one area, position, department or commodity security device (represented as number 6). Therefore, a retail store or other institution can limit the scope of authorization of different employees in the same retail store. In order to accommodate different authorization levels, each key 12 can be configured to store a code associated with each area, position, department or commodity security device. For example, each area can include multiple commodity security devices 14, and a retail store can have multiple areas (e.g., an area for electronic devices, an area for jewelry, etc.).

[0091] Various techniques may be used to initially program the electronic key 12. For example, the electronic key 12 may be initially presented to each authorized commodity security device 14. When communicating with the security device 14 or the cloud 22, the electronic key 12 will be paired with each security device. The programming station 16 may provide a code to the electronic key 12, and the key or cloud 22 may then transmit the code to each of its authorized security devices 14. Each key 12 may only need to be programmed once. In some embodiments, the programming station 16 may be located in each area, and the key 12 may receive a code from each programming station for which it is authorized. Thereafter, each key 12 may need to be "refreshed" at the programming station 16 or charging station 18 after a predetermined period of time or in response to being disabled as described in various examples herein. In other embodiments, the electronic key 12 may be programmed directly via the cloud 22.

[0092] In another embodiment, each electronic key 12 may include a security code and a serial number for one or more merchandise security devices 14. For example, the key 12 may only be able to put a merchandise security device 14 into standby, unstandby, lock, or unlock if the security code and serial number match each other. In one example, each serial number is unique to the merchandise security device 14 and may be programmed at the time of manufacture or by a retailer. This technology allows for greater flexibility in programming the keys 12 and assigning the keys to specific merchandise security devices 14 and / or areas. In one embodiment, a setup electronic key 12" may be used to initially map specific merchandise security devices 14 and serial numbers. In this regard, the setup key 12" may be used to communicate with each key 12 and obtain the serial number of each merchandise security device 14. The setup key 12" may also obtain the location of the security device 14, or the user who sets the key may provide a description of each merchandise security device (e.g., SN#123=merchandise security device#1). The setup key 12" may communicate with a tablet or other computing device 26 to accumulate all information (see, e.g., Figure 3 and Fig.19 ), which can occur via wired or wireless communications. Thus, the tablet or computing device 26 can map each of the serial numbers to a merchandise security device 14, and in some cases, can also include the serial number and the corresponding electronic key 12. Each electronic key 12 can then be assigned a specific serial number for use with an authorized merchandise security device 14 (e.g., user 1 includes serial numbers 1, 2, 3; user 2 includes serial numbers 1, 4, 5). Each of the electronic keys 12 can be programmed with the same security code using the programming station 16. In some embodiments, the setup process can be used in conjunction with a planogram of merchandise security devices 14. The planogram can represent the layout of merchandise security devices 14 within a retail store or other institution. For example, when the setup key communicates with each merchandise security device, the setup key 12" can be used to map the serial number to a specific merchandise security device 14 on the planogram. The setup key 12" can communicate with the tablet or other computing device 26 for use, such as via a wired connection (see, e.g. Fig.19 ) populates the planogram with serial numbers. The planogram may be uploaded to a remote location or device for managing the planogram and ensuring planogram compliance based on information exchanged between the security device 14 and the computing device 26. As previously described, specific serial numbers may be assigned to authorized users.

[0093] To arm, disarm, lock, or unlock a merchandise security device 14, the electronic key 12 can communicate with a particular merchandise security device and determine if the security code and serial number match. If the codes match, the electronic key 12 then arms, disarms, locks, or unlocks the merchandise security device 14. When flashing the electronic key 12 and / or when a user requests an electronic key via the programming or authorization station 16, any available electronic key can be used because the key can be programmed in real time with the appropriate authorization level for that user (e.g., a particular area, department, and / or merchandise security device).

[0094] In one embodiment, the merchandise display security system 10 includes an electronic key 12 and a merchandise security device 14, which is configured to be operated by a key. The system may also include an optional programming station 16, which is operable to program the key 12 with a security code, which may also be referred to as a security release code (SDC) in this article. In addition to the programming station 16, the system may also include an optional charging station 18, which is operable to initially charge and / or subsequently recharge a power source disposed in the key 12. For example, the key 12 and the merchandise security device 14 may each be programmed into a corresponding permanent memory with the same SDC. The key 12 may be equipped with a single-use (i.e., non-rechargeable) power source, such as a conventional or extended-life battery, or alternatively, the key may be equipped with a multiple-use (i.e., rechargeable) power source, such as a conventional capacitor or a rechargeable battery. In either instance, the power source may be permanent, semi-permanent (i.e., replaceable) or rechargeable, as desired. In the latter example, a charging station 18 is provided to initially charge and / or subsequently recharge a power source disposed within the key 12. In addition, the key 12 and / or the merchandise security device 14 may be provided with only temporary memory, such that the SDC must be programmed (or reprogrammed) at predetermined time intervals. In this case, a programming station 16 is provided to initially program and / or subsequently reprogram the SDC into the key 12. As will be described, the key 12 is operable to initially program and / or subsequently reprogram the merchandise security device 14 with the SDC. The key 12 is then further operable to operate the merchandise security device 14 by transferring power and / or data to the device, as will be described.

[0095] exist Figure 1-Figure 2In the exemplary embodiment of the system shown, the electronic key 12 is configured to be programmed with a unique SDC by the programming station 16. In some embodiments, the key 12 is presented to the programming station 16, and communication therebetween is initiated, for example, by pressing or otherwise actuating a control button 28 disposed on the exterior of the key. The communication between the programming station 16 and the key 12 may be accomplished directly, for example, through one or more electrical contacts, or indirectly, for example, through wireless communication. Any form of wireless communication capable of transmitting data between the programming station 16 and the key 12 is also possible, including but not limited to optical transmission, acoustic transmission, or magnetic induction. In some embodiments shown and described herein, the communication between the programming station 16 and the key 12 is achieved by wireless optical transmission, and more specifically, by cooperative infrared (IR) transceivers disposed in the programming station and the key. In some embodiments, the programming station 16 may function similarly to the programming station disclosed in U.S. Patent No. 7,737,844, entitled "PROGRAMMING STATION FORASECURITY SYSTEM FOR PROTECTING MERCKDISE", the disclosure of which is incorporated herein by reference in its entirety. For the purpose of describing some embodiments of the present invention, it is sufficient that the programming station includes at least a logic control circuit for generating or being provided with an SDC, a memory for storing the SDC, and a communication system suitable for interacting with the electronic key 12 in the manner described herein to program the key with the SDC.

[0096] An available feature of the merchandise security system 10 according to one embodiment is that the electronic key 12 can include a timeout function. More specifically, the ability of the key 12 to transmit data and / or power to the merchandise security device 14 can be disabled after a predetermined period of time. As an example, the electronic key 12 can be disabled after approximately six to approximately twenty-four hours from the time the key was programmed or last refreshed. In this manner, an authorized sales employee typically must program or refresh the key 12 assigned to him at the beginning of each work shift. In addition, the charging station 18 can be configured to disable the electronic key 12 when the key is located in or otherwise engaged with the charging port 30 (see, e.g., Figure 1). In this way, the charging station 18 can be available to authorized sales employees. In one embodiment, the electronic key 12 can be authorized when the sales employee enters an authorization code to release the key for use. For example, the sales employee can enter the code on a keypad that communicates with the charging station 18. When the correct code is entered, the charging station 18 can indicate which key 12 is authorized for use by the sales employee (e.g., via an audible and / or visual indicator). In some cases, the timeout period can be predetermined or customized by the user. For example, a manager of a retail store can enter a specific time period for one or more of the electronic keys 12. Those electronic keys 12 that are "active" can be monitored via communications within a cloud-based network. In other embodiments, the electronic key 12 can time out or otherwise be disabled in response to an event. For example, the electronic key 12 can be disabled in response to a key being misplaced or stolen or a key being brought into a retail store where it is not authorized for use. Alternatively, such disabling can occur via a command from a device 26, which is sent to the electronic key 12 via the cloud 22. In other cases, the electronic key 12 may be disabled in response to a failure to communicate with the network (e.g., at a specific time or time interval), a loss of connection to the network, and / or an inability to reconnect to the network. In another example, the electronic key 12 may be disabled in response to its memory being full (e.g., full of audit data).

[0097] In one embodiment, commands can be provided remotely to take various actions. For example, in the event that a theft has occurred, commands can be provided from a remote location or device 26 (e.g., a tablet or computer) to lock and / or standby all or part of the commodity security device 14. Similarly, commands can be provided from a remote location or device 26 to deactivate all or part of the electronic key 12 and / or security device 14. In this way, the system 10 provides a technology for centralized security and control of electronic keys 12, commodity security devices 14, and other components within the system. As discussed above, the electronic key 12 can also be remotely controlled. In addition, in some embodiments, such requests or commands can be made by a computing device 26 for individual security devices 14 or multiple security devices (e.g., a command to lock all security devices is sent in response to a security event). In addition, one or more of the security devices 14 can be configured to lock or alarm in response to a security event (e.g., automatically locking a sensor attached to the commodity to a base that removably supports the sensor).

[0098] Figure 5-Figure 6An embodiment of an electronic key 12 is shown. The electronic key 12 may include a control button 28 for activating the key, such as for initiating communication with a commodity security device. In addition, the electronic key 12 may also include one or more visual indicators. In this regard, the key 12 may include one or more status indicators 32 that show the status of the key's communication with the commodity security device 14. The status indicator 32 may guide the user to know when the communication between the key 12 and the commodity security device 14 has occurred and has been completed. The status indicator 32 may differ depending on whether the communication is authorized (e.g., unlocked or released from standby), unauthorized (e.g., wrong area or department), or unsuccessful. The status indicator 32 may also indicate the amount of time remaining on the key 12 for authorized use, such as when the key includes a timeout feature as described above. The electronic key 12 may also include one or more other indicators 34 that provide a visual indication of the remaining power on the key. These other indicators 34 may also be used for any other desired purpose, such as indicating the programming status of the key 12. For example, the indicator 34 may be activated when the electronic key 12 is initially programmed. It should be understood that the status indicators 32 , 34 shown are for illustration only, as various types and configurations of indicators may be employed in alternative embodiments.

[0099] Figure 7-10 Additional embodiments of the electronic key 12 are shown. In these examples, the electronic key 12 includes a removable portion 36. Figure 7-Figure 8 , the removable portion 36 allows access to the power port 38, for example, for recharging the electronic key 12. The removable portion 36 can be configured to slide relative to the electronic key 12 to expose the input power port 38. The input port 38 can be configured to receive and electrically connect to a corresponding connector, such as a connector associated with the charging station 18. For example, the electronic key 12 can be configured to dock within the charging station 18 to charge it (see, e.g., Figure 1 ).like Figure 9-10 As shown, the removable portion 36 can also be configured to be completely removed from the electronic key 12 and can be multi-purpose because it can include a tool portion 40. For example, the tool portion 40 can be used to facilitate disconnection of various connectors (such as a screwdriver, etc.). The electronic key 12 can include an opening 42 that is defined to receive the removable portion 36 therein in a non-use position.

[0100] Figure 20-21An additional embodiment of an electronic key 12' is shown. In this embodiment, the electronic key 12' includes one or more alignment features 15 for facilitating alignment with a programming or authorization station 16' and / or a charging station 18', as discussed in further detail below. In addition, the electronic key 12' includes an input port 17 (e.g., a micro USB port) that can be configured to releasably engage a corresponding port on the programming or authorization station 16' and / or the charging station 18' for data and / or power transfer. Notably, in Fig. 20 In the example shown, the input port 17 on the electronic key 12' is located on a side surface, and a pair of alignment features 15 are provided on an opposing surface of the electronic key. Fig.21 In the illustrated embodiment, a single alignment feature 15 is provided. An input port 17 may be located on a side surface between a transmission port at one end and a key fob ring opening at an opposite end. Positioning the input port 17 on a side surface of the electronic key 12' may provide a more secure and stable attachment to a programming or authorization station 16' and / or a charging station 18'. As described above, a series of status indicators 32, 34, such as light emitting diodes (LEDs), may be provided on the exterior of the electronic key 12' to indicate its operating status.

[0101] like Figure 1 As shown, the programming station 16 includes a housing configured to contain a logic control circuit for generating an SDC, a memory for storing the SDC, and a communication system for transmitting the SDC to the key (e.g., wirelessly). In use, the logic control circuit generates an SDC, which may be a predetermined (i.e., "factory preset") security code, a manually entered security code, or a security code randomly generated by the logic control circuit. In the latter example, the logic control circuit also includes a random number generator for generating a unique SDC. A series of visual indicators, such as light emitting diodes (LEDs), may be provided on the exterior of the housing to indicate the operating status of the programming station 16. The programming station 16 may also be provided with an access mechanism to prevent unauthorized persons from using the programming station. For example, the programming station may include a keypad 44. An authorized user may enter a code in the keypad 44 that allows the programming station 16 to generate an SDC for communicating with the key 12.

[0102] In a particular embodiment, the logic control circuitry of the programming station 16 performs an electronic exchange of data with the logic control circuitry of the key, commonly referred to as a "handshake communication protocol." The handshake communication protocol determines whether the key 12 is an authorized key that has not been previously programmed (e.g., a "new" key), or an authorized key that is presented to the programming station 16 at a subsequent time to refresh the SDC. In the event that the handshake communication protocol fails, the programming station 16 will not provide the SDC to an unauthorized device attempting to obtain the SDC. When the handshake communication protocol is successful, the programming station 16 allows the SDC to be sent by the key 12. It will be apparent to those skilled in the art that the SDC can be sent from the programming station 16 to the key 12 as desired by any suitable means, including but not limited to wireless, electrical contacts, or electromechanical, electromagnetic, or magnetic conductors. In addition, in other cases, the programming station 16 can simply provide the SDC to the electronic key 12 without first initiating any handshake communication protocol.

[0103] In some embodiments, the commodity security device 14 is a "passive" device. As used herein, the term passive is intended to indicate that the security device 14 does not have an internal power supply sufficient to lock and / or unlock a mechanical locking mechanism. When the commodity security device 14 is passive, retailers obtain significant cost savings because the expense of the internal power supply is limited to the key 12, and one such key is capable of operating multiple security devices. If necessary, the commodity security device 14 may also be provided with a temporary power supply (e.g., a capacitor or a limited life battery) having enough power to activate an alarm in response to a security breach, such as a piezoelectric sound alarm, which is actuated by a sensor (e.g., a contact switch, a proximity switch, or a limit switch). The temporary power supply may also be sufficient to transmit data (e.g., SDC) from the commodity security device 14 to the key 12 to authenticate the security device, thereby authorizing the key to provide power to the security device. In other cases, the security device may be an electronic device, such as a sensor attached to the commodity and a base on which the sensor is removably supported. The sensor may be attached to the base with a tether, or may be wireless (e.g., using ranging technology as described in more detail below).

[0104] In some embodiments, the commodity security device 14 further includes a logic control circuit, similar to the logic control circuit disposed within the key 12, adapted to perform a handshake communication protocol with the logic control circuit of the key in a manner substantially similar to that between the programming station 16 and the key. In essence, the logic control circuit of the key 12 and the logic control circuit of the commodity security device 14 communicate with each other to determine whether the commodity security device is an authorized device that does not have a security code, or a device that has a matching SDC. In the event that the handshake communication protocol fails (e.g., the device is not authorized or the device has an unmatched SDC), the key 12 will not program the device with the SDC, and therefore, the commodity security device will not operate. If the commodity security device 14 was previously programmed with a different SDC, the device will no longer communicate with the key 12. In the event that the handshake communication protocol is successful, the key 12 allows the SDC stored in the key to be sent to the commodity security device 14 to program the device with the SDC. It will be apparent to those skilled in the art that the SDC can be sent from the key 12 to the commodity security device 14 in any suitable manner, including but not limited to via radio frequency, one or more electrical contacts, electromechanical, electromagnetic, or magnetic conductors as desired. Additionally, the SDC may be sent via an inductive transmission of data from the electronic key 12 to the merchandise security device 14. Additionally, in other cases, the electronic key 12 may simply provide the SDC to the merchandise security device 14 without first initiating any handshake communication protocol.

[0105] In one embodiment, when the handshake communication protocol is successful and the commodity security device 14 is an authorized device with a matching SDC, the commodity security device can be armed or unarmed, such as in the case where the security device includes an alarm circuit. In other embodiments, when the SDC code matches, the commodity security device 14 can be armed or unarmed. In some embodiments, when the handshake communication protocol is successful and the SDC code matches, the logic control circuit of the key 12 causes the key's internal power supply to transfer power to the device 14 to operate the mechanical locking mechanism. In other embodiments, when the SDC code matches and power is transferred to the commodity security device, the commodity security device 14 can be locked or unlocked. It should be understood that various information and codes can be exchanged in order to perform the desired functions, such as arming, unarming, locking or unlocking the commodity security device 14. For example, the exchanged data may include the serial number and / or SDC of a separate commodity security device.

[0106] Fig.11One embodiment of a commodity security device 140 is shown in greater detail. As previously described, the commodity security device 14 can be any type of security device that utilizes an alarm circuit and / or a locking mechanism to lock and / or unlock a lock. In some cases, the commodity security device 140 can be a passive device, meaning that it does not have an internal power source sufficient to operate the locking mechanism. As a result, the commodity security device 140 can be configured to receive power from an external source (e.g., the electronic key 12 shown and described herein), or alternatively, receive power and data. Fig.11 The embodiment of the commodity security device shown is a cabinet lock configured to be securely fixed to the locking arm 104 of a conventional cabinet lock bracket 105. As previously described, the cabinet lock 140 may include a logic control circuit for performing a handshake communication protocol with the logic control circuit of the key 12 and for receiving the SDC from the key. In other embodiments, the cabinet lock 140 may be configured to transmit the SDC to the key 12 to authenticate the security device, thereby authorizing the key to transmit power to the security device.

[0107] Fig.12 An embodiment of an electronic key 120 with inductive transmission is shown in greater detail. As previously described, the key 120 can be configured to transmit both data and power to the merchandise security device 140. Thus, the programmable electronic key 120 can be an active device in the sense that it has an internal power source sufficient to operate the mechanical locking mechanism of the merchandise security device 140. As a result, the programmable electronic key 120 can be configured to transmit both data and power from an internal source, such as a logic control circuit (e.g., data) and a battery (e.g., power) disposed within the key. The embodiment of the programmable electronic key 120 depicted herein is a key with inductive transmission capability that is configured to be housed in a Fig.11 The electronic key 120 is shown in the transmission port 142 of the cabinet lock 140 as well as the programming port 46 of the programming station and the charging port 30 of the charging station. Therefore, the electronic key 120 can be placed near or inside the transmission port 142 to communicate with it. In some embodiments, a tag (e.g., an RFID or NFC tag) as discussed above can be positioned within the transmission port, or otherwise positioned on the security device 140, so that the electronic key 120 is configured to read or otherwise obtain identification data from the tag.

[0108] In some embodiments, the electronic key 120 includes a housing 121 having an internal cavity or compartment that contains the internal components of the key, including but not limited to logic control circuits, memory, communication systems, and batteries, as will be described. As shown, the housing 121 is formed by a lower portion 123 and an upper portion 124 that are joined together (e.g., by ultrasonic welding) after assembly. The electronic key 120 also defines an opening 128 at one end for coupling the key to a key chain ring, a lanyard, etc. The electronic key 120 may also include a transmission probe 125 located at an end of the housing 121 opposite the opening 128 for transmitting data and / or power to the commodity security device 140. The transmission probe 125 is also operable to send and receive handshake communication protocols and SDC from the programming station 16, as previously described, and receive power from the charging station.

[0109] like Fig.13 As best shown in FIG. 1 , an internal battery 131 and a logic control circuit or printed circuit board (PCB) 132 are disposed within the housing 121 of the electronic key 120. The battery 131 may be a conventional extended life replaceable battery or a rechargeable battery suitable for use with the charging station 18. The logic control circuit 132 is operably coupled and electrically connected to a switch 133, which is actuated by a control button 122 disposed on the exterior of the key 120 through the housing 121. The control button 122, in conjunction with the switch 133, controls certain operations of the logic control circuit 132, particularly the transmission of data and / or power. In this regard, the logic control circuit 132 is also operably coupled and electrically connected to a communication system 134 for transmitting data and / or power. In one embodiment, the communication system 134 is a wireless infrared (IR) transceiver for optical transmission of data between the electronic key 120 and the programming station and between the key and the commodity security device 140. As a result, the transmission probe 125 of the key 120 may be provided with an optically transparent or translucent filter window 135 for transmitting and collecting optical transmissions between the key 120 and the programming station 16 or between the key and the commodity security device 140 as required. The transmission probe 125 may also include an inductive core 127 and an inductive core winding 129 for transmitting power to the commodity security device 140 and / or receiving power from the charging station 18 to charge the internal battery 131 as required. Alternatively, the optical transceiver 134 may be eliminated and data transmitted between the programmable electronic key 120 and the commodity security device 140 via magnetic induction through the inductive coil 126.

[0110] In some embodiments, an important aspect of the electronic key 120, particularly when used in conjunction with a commodity security device 140 as described herein, is that the key does not require a user to apply physical force on the key to operate the mechanical lock mechanism of the commodity security device. By extension, the key 120 has no physical force applied to the mechanical lock mechanism. As a result, the key 120 will not be accidentally broken in the lock as with a conventional mechanical key and lock mechanism. In addition, neither the key 120 nor the mechanical lock mechanism will be subject to excessive wear and tear that often occurs with conventional mechanical keys and lock mechanisms. In addition, in some cases, the orientation of the transmission probe 125 of the electronic key 120 relative to the port on any one of the programming station, charging station and / or commodity security device 140 is not required. Therefore, any wear on the electrical contacts on the transmission probe 125 and the port can be minimized. As another advantage in some embodiments, an authorized person does not need to position the transmission probe 125 of the electronic key 120 relative to the transmission port 142 of the commodity security device 140 in a specific orientation and then apply compression and / or torsional force on the key to operate the mechanical lock mechanism of the device.

[0111] Figure 22-Figure 24 An embodiment of a programming or authorization station 16' is shown. As shown, the programming or authorization station 16' includes a geometric shape for accommodating the electronic key 12' discussed above (see, for example, Fig.21 ). In this regard, the programming or authorization station 16' may include one or more alignment features 15' that are configured to align and engage with the alignment features 15 of the electronic key 12'. In addition, the programming or authorization station 16' may also define a recess 48 for at least partially accommodating the side surface of the electronic key 12'. The recess 48 may be curved or any other shape to correspond to the shape of the electronic key 12'. Within the recess 48, the programming or authorization station 16' may include a port 30' for releasably engaging the input port 17 of the electronic key 12'. The alignment features 15, 15' are configured to align with each other to ensure that the input port 17 and the port 30' are aligned and engaged with each other. Such engagement may allow data communication between the electronic key 12' and the programming or authorization station 16', which in some cases may occur when an authorization code is entered using the keypad 44. In addition, the programming or authorization station 16' may include one or more input ports 50 (e.g., an Ethernet port) for receiving power and data communications.

[0112] Figure 1The charging station 18 is shown in greater detail. As previously described, the charging station 18 recharges the internal battery 131 of the key 12. In some instances, the charging station 18 also disables the data transmission and / or power transmission capabilities of the key 12 until the programming station 16 has reprogrammed the key with the SDC or the user provides an authorization code to the charging station. Regardless, the charging station 18 includes a housing for housing the internal components of the charging station. The exterior of the housing has at least one and preferably a plurality of charging ports 30 formed therein that are sized and shaped to receive the electronic key 12 (see, e.g., Figure 1 ). Mechanical or magnetic components may be provided for properly positioning and securely retaining the key 12 within the charging port 18 to ensure proper power transfer.

[0113] Figure 16-18 An embodiment of the charging station 18 is shown in which a plurality of ports 30 are provided for engaging a plurality of corresponding electronic keys 12 ′. Fig.21 The electronic key 12 ′ shown in FIG. Figure 16-18 , whereby the electronic key 12' includes an input port 17 on its side for engaging with a port 30, similar to that described in conjunction with the programming or authorization station 16'. Likewise, each port 30 can be located within a corresponding recess 48 for accommodating at least one side surface of the electronic key 12'. This arrangement can allow a greater number of electronic keys 12' to be engaged with the charging station 18 at any one time.

[0114] Figure 14-15An additional embodiment of a commodity security device 150 is shown. In this embodiment, the commodity security device 150 includes a lock mechanism that utilizes "energy harvesting". Therefore, the commodity security device 150 can be a passive device as described above. However, in this embodiment, the commodity security device 150 includes a component for generating electricity to be stored. For example, the commodity security device 150 can be configured to rotate between a locked position and an unlocked position, and includes a generator configured to generate energy to be stored (e.g., via a capacitor). In some cases, the commodity security device 150 can include a frame, and each circle of the frame can generate a charge to be stored. In one embodiment, the electronic key 12 can be initially used to disengage the mechanical lock, and then the commodity security device 150 can be rotated to the unlocked position. Then, the commodity security device 150 can be rotated back to the locked position. Since the commodity security device 150 has no power supply, the security device is able to use the stored power to perform various security functions. For example, the commodity security device 150 can be configured to use the stored power to push data to one or more nodes 20 or generate audible and / or visible signals. In one example, the commodity security device 150 may include an internal radio for sending wireless signals using the stored power, such as for generating a distress signal when the security device is tampered with. In another example, the commodity security device 150 may include a light emitting device (LED) powered by the stored power.

[0115] In another embodiment, multiple nodes are used for peer-to-peer communication to facilitate the generation of alarm signals (such as audible and / or visual signals). For example, Fig.25A plurality of commodity security devices 14 (e.g., sensors) and alarm nodes 30 are shown, which are configured to wirelessly transmit various information to a gateway 24 via a network. For example, the sensors 14 and / or nodes 30 may be configured to send and receive information about their configuration, alarm status (e.g., alarm, standby, un-standby) and / or instructions (e.g., standby, alarm or un-standby) to and from the gateway 24. The commodity security devices 14 and nodes 30 may also be configured to communicate directly with each other as described below, and to switch between communication with the gateway 24 and each other. Any number of nodes 30 may be located at various locations within a retail store, such as, for example, on a display stand or store entrance or exit. The nodes 30 may communicate wirelessly with the commodity security devices 14 and gateways 24 within the network, for example, using various wireless communication protocols as described above. One disadvantage of using wireless communication to initiate an alarm at a location away from the commodity security device 14 is that the alarm signal usually must travel to a wireless hub, and then the server decrypts the data and decides to send an alarm signal to the appropriate alarm node. Such a system may generate latency when generating an alarm signal, especially if the server is not local, and if any component of the wireless communication chain is interrupted (e.g., the hub loses power), the alarm signal may never reach the alarm node, and therefore no alarm occurs. In one embodiment, multiple communication modes can be used to reduce or eliminate these problems. For example, in addition to the first wireless communication protocol between the commodity security device 14 and the gateway 24 and / or the alarm node 30 and the gateway (e.g., WiFi, LoRa, etc.), a second wireless communication protocol can be used, which is a direct node-to-node communication scheme between the commodity security device and the alarm node, which does not have to communicate with any hub or gateway. In some embodiments, the communication protocols can be the same or different. In one example, the second wireless communication protocol can be performed using the same radio antenna as other operating signals to communicate with the hub or gateway 24 (e.g., Wi-Fi, LoRa, etc.), so as not to add additional cost or size to the commodity security device 14 and the alarm node 30 to complete the communication. However, the second radio is also an option. Additionally, the alarm signal can be broadcast on a frequency different from other signals to address regional regulatory requirements and / or if it is detected or known that certain frequency bands are becoming congested. This communication can be two-way, but in most cases one-way communication is sufficient. The commodity security device 14 can send out a "help me" signal in response to a security event. The alarm node 30 will then only have to "listen" for the signal, and if it receives the signal, the alarm node can generate an alarm by whatever means it is programmed for (e.g., light, sound, vibration, etc.).

[0116] In some cases, multiple alarm nodes 30 may be used, and (one or more) specific commodity security devices 14 may be configured to activate (one or more) specific alarm nodes. For example, in the case where a retail store includes multiple display stands for multiple commodity security devices 14, there may be an alarm node 30 associated with each stand, which will only be triggered by a "help me" signal from any one of the commodity security devices associated with the same stand. In this case, an identifier (e.g., an ID code) may be added to the "help me" signal corresponding to the code stored in the alarm node 30. Therefore, the alarm node 30 may have to receive or recognize its code in order to generate an alarm signal. This can be as simple as the code itself being the "help me" signal, or may be added to the identifier or included in the identifier Some other instruction code, for example, if more than one action (e.g., "alarm" or "stop alarm") needs to be transmitted to the alarm node. The commodity security device 14 can be configured to generate the "help me" signal immediately upon destruction, and only after the signal is sent to the alarm node 30, the commodity security device will communicate to the hub and gateway via wireless communication that a destruction has occurred. Therefore, in this destruction scenario, the waiting time delay should be minimized.

[0117] As discussed above, the electronic keys 12 , 120 and / or the computing device 26 may be configured to communicate with and / or control various security devices 14 . Fig.43 An embodiment of a merchandise display security system 200 is shown that includes a lock 202 for locking various types of fixtures, such as cabinets and drawers. Fig.43 and Fig.47 In the example shown, the lock 202 can be used to secure sliding glass doors and drawers (see also Figure 48-Figure 49 ). The system 10 may include various wireless functions for communication between the lock 202, the computing device 26, the hub or gateway, the electronic keys 12, 120, and / or the remote devices. For example, Fig.44 The retail store is shown to include wireless communication circuitry in the form of a wireless router, or other similar hub 24 that can facilitate Wi-Fi communications, but other forms of communication (such as cellular) may be used. The hub 24 can be used to facilitate communication between the computing device 26 and one or more remote devices. In some cases, the electronic key 120 can be configured to communicate with one or more remote devices via the hub 24 as well. Communication between the computing device 26 and one or more remote devices can be used to assign authorizations to various computing devices and / or transmit various types of data, such as the types disclosed above. For example, the data may include lock status and system health information.

[0118] The computing device 26 may include wireless communication circuitry configured for BLE, Bluetooth, and / or NFC communications. The computing device 26 may also or alternatively include a camera or scanner for scanning images or information from the lock 202, as discussed in further detail below. Similarly, the lock 202 may include various wireless communication circuitry configured for BLE, Bluetooth, and / or NFC communications. The lock 202 may also or alternatively include a barcode or other identifier. In some cases, the computing device 26 may be configured to pair with one or more locks 202 (e.g., via Bluetooth communications) and / or include one or more additional communication protocols (e.g., NFC, camera, barcode, etc.) for operating the lock.

[0119] In one example embodiment, the computing device 26 is configured to communicate with one or more locks 202 using a first communication protocol (e.g., Bluetooth). To unlock a particular lock, the computing device 26 may also be configured to communicate with each lock using a second communication protocol (e.g., NFC or image scanning). The second communication protocol may be used to identify the particular lock 202 that the computing device 26 is authorized to unlock. For example, the NFC tag may have an identifier unique to the lock 202 (similar to a serial number), and if the computing device 26 confirms that the identifier matches, the computing device is authorized to unlock the lock. If the computing device 26 is authorized based on confirmation of the identification of the lock 202, the computing device may then transmit an unlock command to the lock using the first communication protocol.

[0120] In some cases, the lock 202 is configured to continuously or nearly continuously transmit signals, such as via a Bluetooth beacon. The computing device 26 can be configured to automatically detect the signal transmitted by the lock 202, and the user can then use the computing device to communicate with the lock via the second communication protocol to identify the lock to be unlocked (e.g., via NFC). Once the lock 202 has been identified, the user can direct the computing device 26 to send an unlock command to the lock 202. The computing device 26 can be configured to communicate with the lock 202 using the first communication protocol after identifying the lock using the second communication protocol. For example, the lock 202 can be configured to transmit a beacon signal including the identification of the lock at a predetermined interval, and after the lock has been identified by the computing device 26, the computing device and the lock can establish communication after receiving the next beacon signal.

[0121] The lock 202 can take many different forms and configurations. The lock 202 can include various types of lock parts for different applications, such as a plunger lock for a sliding cabinet door or a cam lock for a drawer. Figure 45A-Figure 45CAn embodiment of a lock 202 is shown, wherein the lock includes a lock mechanism 212, a drive mechanism 214, an NFC tag 216, a transmission port 206 having an IR transceiver, an induction coil 218, a PCBA 220 having a Bluetooth module, and an internal power source 222 (e.g., a battery). In addition, Figure 46A-46B It is shown that the lock 202 can have different shapes depending on the application. For example, some locks 202 may or may not include an internal power source 222, thereby affecting the size of the lock. In some applications, the internal power source 222 can be external to the lock 202, such as for a drawer, where the lock can be positioned on the front of the drawer, and the internal power source can be positioned inside the drawer and in electrical communication with the lock. Figure 50A-Figure 50B In one embodiment further shown in FIG. 1 , the lock 202 may include an NFC tag 216 and a transmission port 206, wherein the transmission port is similar to the transmission port described above for communicating with the electronic key 12, 120. The NFC tag 216 may be located behind a cover 208 that covers or otherwise hides the NFC tag. For example, the cover may be plastic with a spun metal effect. In another example, the lock 202 may include a 2D barcode 210. The lock 202 may include a removable cover 208 that is configured to hide the NFC tag 216, the barcode 210, or a similar identifier and is removed to communicate with the computing device 26. In some embodiments, lock 202 may include features disclosed in the following patent documents, such as U.S. Provisional Application No. 63 / 194,301 (published as U.S. Publication No. 2022 / 0383714), 63 / 194,329 (published as U.S. Publication No. 2022 / 0381066), and 63 / 194,347 (published as U.S. Publication No. 2022 / 0381065), each of which is entitled "MERCHANDISEDISPLAY SECURITY SYSTEMS AND METHODS," the entire disclosures of which are incorporated herein in their entirety.

[0122] As described above, the lock 202 may be configured to communicate with the electronic key 120 to unlock the lock. Fig.51 An example of a key 120 communicating with a lock 202 via a transmission port 206 is shown. The key 120 can be used in addition to or in lieu of using the computing device 26 to unlock the lock. In the event that the power source 222 of the lock 202 is no longer able to unlock the lock (e.g., the battery is exhausted), the key 120 can be configured to transmit power to the lock to operate the lock, as disclosed above. In another embodiment, Figure 52A-Figure 52BIt is shown that the internal power source 222 can be a modular assembly 224 so that the power source can be replaced with another power source, such as in the form of a removable battery pack having a housing containing one or more batteries. In other cases, if the internal power source is no longer needed or the lock is being used for a different application, the modular assembly 224 (e.g., the removable battery pack) can be removed and replaced with a cover. Thus, even if the internal power source 222 cannot unlock the lock, embodiments of the present invention can operate the lock 202.

[0123] In some embodiments, the modularity of the power source 222 (e.g., a battery pack) may be dependent on or independent of the operation of the lock 202. In this regard, it may be problematic if the theft of the power source 222 impedes the operation of the lock 202. In one example, the locking mechanism for unlocking the lock 202 may be dependent on the mechanism for accessing the internal power source 222. Thus, the user will need to use the computing device 26 or the electronic key 120 to access the internal power source 222. Before the internal power source 222 can be accessed, the lock 202 may need to be in an unlocked state, thereby requiring the presence of an authorized user before the internal power source can be accessed. In other embodiments, a second locking mechanism independent of the locking mechanism of the lock 202 may be employed to access the internal power source 222. The second locking mechanism may be configured to be operated by the computing device 26, the electronic key 120, and / or other types of keys. For example, a mechanical locking mechanism may be operated using a magnetic key or tool that is configured to unlock the locking mechanism for releasing or accessing the internal power source 222. In some cases, different user access levels may be used so that only certain users are authorized to unlock the second locking mechanism to access the internal power source 222 (e.g., a manager may be assigned access rights for such access, but retail employees are not). Such access levels may be used when access rights are assigned as disclosed above.

[0124] In operation, Fig.53A An example of a user using computing device 26 to unlock a lock using NFC communications is shown, where the user places the computing device near NFC tag 216, which causes the lock to be automatically unlocked. Figure 53B-Figure 53CIt is also shown that the user can use the camera 226 or scanner 228 of the computing device 26 to scan the barcode 210 to unlock the lock. In some cases, a consumer or store employee can use the camera 226 of the computing device 26 to unlock the lock 202, while only the store employee may be authorized to use the scanner 228 of the computing device 26. The computing device 26 may include a software application that facilitates communication with the lock 202 in any of the above examples, such as by allowing the user to select an "unlock" command for unlocking the lock 202 (if the user is authorized to do so). Authorization can be accomplished in various ways, such as via the embodiments described above (e.g., the assignment of a specific lock or zone). In other cases, the user can be authorized by virtue of being pre-authorized by downloading the software application and entering various information for identifying the user. The software application can also be password protected to ensure that the user is authorized to operate the lock 202. In addition, the software application can facilitate data collection and communication with one or more remote devices.

[0125] In some embodiments, the user may be required to manually unlock the lock after using the computing device 26 or the electronic key 120 to unlock the lock 202. For example, the locking mechanism 212 may be configured to be unlocked using the computing device 26, and the user may be required to actuate the drive mechanism 214 to achieve unlocking. After a successful unlock command from the computing device 26, Fig.54A It is shown that the user may have a limited or predetermined amount of time to unlock the lock 202. For example, the lock 202 may include a visible indicator 230 (e.g., an LED) that lights up or flashes different colors at different frequencies depending on whether the lock 202 can be unlocked. If the user chooses to unlock the lock 202 after a successful unlock command, the lock can be configured to be manually unlocked during the allowed access time, such as by rotating or pulling a portion of the lock (see, e.g., Fig.54B ). For example, if the lock 202 is a cam-type lock, the user may be able to rotate a knob to unlock the lock, while if the lock is a plunger-type lock, the user may be able to pull the knob to unlock the lock. The lock 202 may be configured to automatically re-lock itself after a predetermined period of time. In addition, the user may be required to manually re-latch the lock 202, such as after the allowed access time expires (see, e.g., Fig.54C ). In some cases, the user may be required to rotate or push the knob of the lock 202 in the opposite direction to the direction used to unlock the lock to re-latch. If the user re-latches the lock 202 prematurely, the user may be required to first unlock the lock in order to re-latch the lock again when the fixture is in its fully closed position. It should be understood that the lock 202 may include various actuators for unlocking the lock, such as a knob, handle, etc. that can be used to manually unlock and re-latch the lock. In other embodiments, a separate latching operation may be omitted, such as in the case where the user is able to open the door without unlocking the latch mechanism.

[0126] As described above, lock 202 can be used in any number of applications. In one example, lock 202 can be placed on fixture 205 (e.g., cabinet) for fixing objects therein, such as items already purchased by a consumer. For example, a consumer can be configured to access the purchased items using his or her computing device 26 after making an online purchase. Therefore, upon arrival at a retail store, the consumer may be able to present the computing device 26 to lock 202 to access the purchased items. Along similar basic principles, lock 202 can be used in applications such as car centers or facilities, where the consumer has serviced his or her vehicle. In this embodiment, the consumer leaves his or her keys with the service provider so that the required service can be performed on the vehicle. After completing the service, the consumer may be able to retrieve his or her keys using computing device 26. In this way, the consumer may be able to complete the purchase using computing device 26 and access his or her keys when access to lock 202 is authorized. Each consumer's key can be locked in a corresponding housing within fixture 205. Authorized access may be granted in a variety of ways, such as any of the techniques discussed above with respect to communication between the lock 202 and the computing device 26. In other cases, the consumer may be prompted to enter a code at the lock 202 to access his or her keys (e.g., via a pin code), where the code may be provided to the consumer upon completion of the service purchase. Thus, in some cases, the consumer's computing device 26 is not required. In other cases, an employee may be able to assist the consumer in retrieving the consumer's keys, such as by using the computing device 26 or the electronic key 120. Thus, the lock 202 may protect the consumer's keys until the service provider grants access to a secure enclosure housing the consumer's keys. Clearly, this paradigm may be applied to other products and services where the consumer is able to retrieve a product or item and / or an employee is able to assist the consumer in doing so.

[0127] As also discussed above, computing device 26 may be used to complete or otherwise initiate the purchase of one or more items. In one example, a consumer may use his or her computing device 26 to purchase an item or initiate the purchase of an item without the assistance of a sales associate. Authorization to purchase an item may be based on various forms of authentication (e.g., a key, a software application, the consumer's identification information, a loyalty program, a payment device (e.g., a credit or chip card), a phone number, a completed payment, available funds, etc.). Computing device 26 may include software applications or other computer-executable instructions for facilitating such a purchase or demonstrating an intent to complete a purchase. In addition to the examples above, Fig.55 A system is shown including a computing device 26 configured to access a secure fixture (eg, a secure locker) to unlock a lock 202, while Fig.56A computing device for purchasing items secured to a locking hook 300 or display hook is shown. The locking hook 300 may include a rod 306 configured to support one or more items thereon, and in some cases, a spiral may surround the rod and be configured to rotate to dispense the items (see, e.g., Fig.56 ). The locking hook 300 can be configured to be mounted to a display fixture, such as a pegboard or a slatted board. In some cases, the locking hook 300 can include a sensor 304 for determining the inventory level of items on the hook (e.g., via light, weight, vision, etc.). For example, various embodiments of display hooks, including display hooks with spirals, are disclosed in U.S. Patent No. 10,219,636, entitled “Merchandise Display Hook Including Anti-Sweep Mechanism,” which is incorporated herein by reference in its entirety. In addition, the system for monitoring item inventory can be similar to the embodiments disclosed in U.S. Publication No. 2021 / 0264754, entitled “Merchandise Display Security Systems and Methods,” the entire contents of which are incorporated herein by reference.

[0128] In some embodiments, the locking hook 300 can be configured to allow a user to self-dispense one or more items. For example, Figure 57-Figure 58 An end of a locking hook 300 is shown, which is configured to be unlocked using a computing device 26 to allow one or more items to be removed from a rod 306. In the illustrated embodiment, the locking hook 300 may include a lock 302 that is configured to be unlocked using various forms of authentication, such as via an authorized electronic key 12 and / or computing device 26. In some cases, the lock 302 may include a gate 308 or similar mechanism at the end of the rod 306, which is configured to be closed and locked so that the items cannot be removed, and opened and unlocked so that the items can be removed. In the illustrated embodiment, the gate 308 is shown as a rod that is configured to move laterally or axially between a closed position and an open position relative to the rod 306. In this example, the gate 308 can be configured to engage and disengage an end assembly 310 at the end of the rod 306, wherein in the engaged position, the items cannot be removed from the rod, and in the disengaged position, a gap is defined between the end of the rod and the end assembly to allow the items to be removed. Other configurations of the gate 308 are also possible. For example, the end assembly 310 can be configured to rotate or otherwise move upward and away from the rod 306 to open the gate 308 or otherwise allow the removal of items.

[0129] In one embodiment, the gate 308 is configured to open when a successful transaction has occurred, such as a payment transaction or authorized user verification using a computing device 26 or other verification methods disclosed herein. When this occurs, the gate 308 can be configured to unlock and optionally open automatically. The locking hook 300 may include appropriate electronic devices (e.g., PCB, battery, etc.) for facilitating the functions disclosed herein. For example, the locking hook 300 may include a motor driven by a battery for unlocking the lock 302 and / or moving the gate 308. The locking hook 300 may also include electronic devices configured to facilitate communication with various computing devices 26, electronic keys 12, and / or payment devices (e.g., credit cards). For example, the appearance hook 300 may include any communication circuit disclosed herein to facilitate such communication (e.g., NFC, Bluetooth, barcode, etc.). In order to save battery life, the gate 308 can be configured to unlock only in response to communication with the computing device 26, and the energy of the user removing the item from the hook 306 is used to open the door. Either way, the gate 308 allows one item to be removed, and the gate is then configured to close and relock (e.g., automatically). In other embodiments, the consumer may be charged based on the number of items removed from the hook 306. Thus, the number of items removed from the hook 306 may be detected.

[0130] In some cases, gate 308 may have at least one sensor 312 to detect when an item has been moved through the gate or removed from hook 306. For example, sensor 312 may be located at Fig.57 306. In this way, when the gate 308 is closed, the sensor 312 will be blocked by the hook 306. The sensor 312 can take many different forms, such as a light detector. For example, the light detector can be configured to detect when the gate 308 is closed. Similarly, the sensor 312 can be configured to detect when the gate 308 is open and allows light to enter. An item moving past the sensor 312 can create a momentary shadow, which will be an indication that the item has been removed. Other components that detect the removal of the item can be used, such as a pressure switch.

[0131] In some cases, the second sensor 314 can be used to assist in the timing of opening the gate 308. It is often beneficial to have the gate 308 open for the minimum amount of time required to enable the item to be removed, so the gate may not be opened until the item is in a ready position directly above the gate. The second sensor 314 can be configured to detect when the item is in the correct position and signal the lock 304 to unlock the gate 308.

[0132] In one embodiment, the user may be able to initiate the force required to move the gate 308 to the open position. In this example, the following method may occur. The user authenticates their payment at the lock 300 via the computing device 26 or payment device. The user pulls the item forward along the rod 306 to the ready position, triggering the sensor 314. Seeing the sensor 314 triggered, the lock 300 unlocks the gate 308. The user continues to pull the item forward, which opens the gate 308. The sensor 312 confirms that an item has passed through the gate 308. The gate 308 (which may be spring loaded) automatically moves back to the closed position. The lock 302 re-latches when the gate 308 moves to the closed position.

[0133] To facilitate the loading of items by sales staff, the hook 300 can be configured to operate in a "loading mode", which can be activated by the staff, for example, by using an electronic key 12 or a badge. The hook 300 can then be configured to unlock the lock 302 and open the gate 308 indefinitely, allowing the staff to easily restock the hook without the burden of anti-sweep bends or spirals. The staff can then release the "loading mode" to return the hook 300 to normal operation. The "loading mode" can also be based on a predetermined time period, so that the gate 308 can be configured to automatically return to the closed state after a predetermined time period in case the staff forgets to disable the mode.

[0134] A thief might try Figure 1 Removing multiple items at a time is sometimes called "bunching", which is when a thief clamps the top flaps of multiple items together, and then can slide multiple items out of the gate 308 at a time. In this instance, sensors 312, 314 may not know that multiple packages have left. One way to combat "bunching" is to limit the degree of opening of the door 308. Some of the items displayed on the hook 300 have a clamshell packaging design, which is thicker than a typical cardboard flap at the top. If the gate 308 is configured to open only enough to allow one of these clamshell packages to pass, grouping cannot be achieved on the clamshell packaging. Although this solves the problem of one type of packaging, for other items, such as items with thin cardboard flaps, there is still vulnerability. The solution here can be to have a plastic clip, etc., which is configured to be attached to the cardboard so that these packages have the same thickness as the clamshell packaging. These can be applied by employees before loading items onto the hook 300.

[0135] In another embodiment, a method for performing one or more self-service purchases in conjunction with any of the above-described security devices (e.g., lock 202) is provided. According to one example, a user on computing device 26 loads a software application, which may be a web application, a program, or a mobile application. The user may access the application via browsing a website, scanning a QR code, scanning an NFC tag (e.g., NFC tag 204), or any other means that indicates an intent to purchase an item.

[0136] The user may then use the computing device 26 to perform a financial transaction. The user may scroll through a menu of items to select the item they wish to purchase, or the act of scanning a code (e.g., a QR or NFC tag) may show the user's intent as to which item they wish to purchase. The application may then display the item and the price. The user agrees to purchase the item, and the application sends a request to a payment system to purchase the item. For example, the payment system may be a payment provider (e.g., a credit card provider or retailer) that can confirm that the user has purchased the item.

[0137] The transaction can then be verified and approved by the application. For example, this can be via a login (e.g., Paypal), credit card verification, or mobile wallet verification. The payment system will then deliver a confirmation back to the application (e.g., via an API) that the payment has been completed. This confirmation can be embedded in the SDK code from the payment system. The application then has its own code within this return confirmation to send the unlock command to the secure device. Fig.59 An example embodiment showing a code snippet of a portion of a typical SDK (in this case Paypal's SDK) is shown. The code snippet is the return authorization function returned from Paypal. The highlighted portion of the code is the command sent to the lock to connect and unlock its location.

[0138] The app can then send a verification to the security device containing or holding the item to be purchased. The app now knows that the item has been paid for, and sends a command to the security device. In addition to the unlock command, the application will also include the encryption key of the specific security device that allows it to be opened. The command can be sent directly from the user computing device 26, for example, via Bluetooth or NFC or Wifi Direct, or it can be provided through a cloud network. If through a cloud network, the security device can receive commands directly from the Internet as a result of logging into Wifi or Ethernet. Alternatively, the security device can receive commands via a bridge, where the bridge is a device connected to the Internet. The bridge can communicate with any security device within range, for example, via Bluetooth, Zigby, LoRa, etc.

[0139] Upon receiving the verification, the security device may then unlock, allowing the user to retrieve the item. Unlocking may be accomplished via any number of mechanisms and actuators, such as, for example, motors, shape memory materials, solenoids, and the like.

[0140] In other embodiments, systems and methods for ensuring secure authentication of security devices, users, and payment transactions are provided. Digital locks are well known in the art, but are primarily targeted at individual consumers. There is a market space for security devices (e.g., locks) for commercial users, such as lock cabinets or lock hooks. This use case is very different, considering that at least three parties are involved in the transaction: the hardware manufacturer, the end customer, and the retailer, who is the middleman who needs to verify the end user in some way and then pass the command to the hardware device to allow access. This brings some additional challenges to retailers. Retailers may need the ability to control a large number of locks, perhaps thousands of locks on their floor space. Locks may need to accept commands while remaining secure and encrypted so that they cannot be hacked and opened. End users may be required to signal their desire to access the lock in a way that the retailer knows exactly which of the multiple locks they are requesting access to.

[0141] In one example embodiment, a hardware manufacturer (e.g., a lock manufacturer) manufactures a lock and stores a URL code in the lock (or other type of code or identifier resident on the lock). The URL code may contain an identifier of the lock (such as a serial number).

[0142] In one embodiment and with reference to Fig.60 , the locks are controlled by a bridge device that is connected to the cloud and is able to send commands to the locks. The means of sending commands may be wireless, and may be one of many known technologies. The means of connecting to the cloud may be wireless or wired. It should also be understood that locks may be developed that have their own direct connection to the cloud, such that a bridge may be unnecessary. However, at this point in time, it may be more cost-effective to have one cloud connection in the bridge than one in each lock. Additionally, such a setup may allow for easier installation, as the bridge may need to be configured to connect to the internet (e.g., SSID / password) and the manufacturer key server (e.g., username / password), so it would be beneficial to perform the process once, rather than configuring each lock individually multiple times.

[0143] The bridge can be configured to scan an area of ​​all locks with which it can communicate. This step can be performed during the setup process or before attempting to access any lock. In some cases, the bridge can be configured to store one or more encryption keys in its communication range. The bridge can receive public encryption keys from the lock, but these keys can be encrypted with private keys known only to the manufacturer. The bridge can then pass the encrypted keys to the key server. The key server checks to see if the lock has been registered before. If not, the key server can assign the lock to the username that the bridge uses to connect. If the lock has been registered, the key server can resend the encryption key only when the username used by the bridge to log in matches the original registered username. Therefore, the security of the encryption key can be ensured. In this example, once a user registers a new lock, other users cannot log in and obtain the encryption key for the lock. In addition, because the manufacturer controls the private encryption key, other users cannot decrypt the public authentication key of the lock without retrieving them through the manufacturer's process. In some cases, the key server can also be configured to assign the encryption key to the store or other institution where the lock is located.

[0144] In some embodiments, a combination of more than one encryption key may be used, such as to further ensure the authentication and / or monetization of the manufacturer. For example, the encryption key may be a combination of a hardware encryption key and a data encryption key. The hardware encryption key may be fixed and never change, while the data encryption key may be a rolling key that provides status data (e.g., lock status, lock notification messages, etc.). The lock may be configured to unlock only when both the hardware encryption key and the data encryption key are authenticated. In other cases, the lock may be configured to be unlocked when at least the hardware encryption key is authenticated. The updated data encryption key may be published only when the lock seeks a new data encryption key from the server and the customer's account is in good standing. In the case where the customer's account expires or otherwise does not have a good standing with the manufacturer, the manufacturer may not publish an updated data encryption key, thereby preventing the release of data to the customer. Although the lock can still be unlocked, the customer cannot obtain any data, thereby limiting the customer's visibility to the lock state.

[0145] In some cases, the next step is for the user to obtain the URL code on the lock via software or network applications executed thereon (e.g., via scanning an NFC tag or QR code on the lock) using a computing device 26 (e.g., a mobile device). The URL code can be universal, except for the serial number of the lock. The URL can be configured to point to a server controlled by the manufacturer, but the server may be required to redirect the end user to the URL selected by the retailer. The redirection can be implemented through the retailer's account, which contains all its registered locks. The retailer may be able to log in to the account and set the redirection URL globally, in groups, or even down to a single lock level. The redirection server can greatly improve the initial setup of the system. Without it, the retailer would have to create and install a custom URL code, or the manufacturer would have to make custom labels for them when producing the lock.

[0146] Once the end user has requested to open the lock, such as by scanning an NFC tag or QR code, the retailer can perform any action they desire to authenticate. For example, this can be a simple username / password, or it can be the execution of a financial transaction. The retailer can then decide whether to open the lock for the user. Therefore, payment is not necessarily required in order to authenticate or otherwise verify the identity of the consumer. Various technologies can be used to verify the identity of the consumer, such as loyalty data, payment information, identification, available funds, phone number, etc. In some cases, authentication is initiated by the consumer, for example to access a lock as disclosed herein.

[0147] In some embodiments, the method of communicating with the lock can be through a message broker (such as MQTT or other similar communication protocols). The advantage can be that the software application can easily communicate with the message broker. The bridge can be configured to listen to the message broker (e.g., a request for a specific lock serial number), and when it detects a command to open a lock within its range, it is configured to send the command to the lock. The lock can then send a confirmation message back to the bridge, which forwards them to the agent, which can then be received by the application. In some cases, this method may be preferred because the command can be sent from anywhere: the user's device or the retailer's server or anything connected to the Internet. The proxy service can also be username / password protected to ensure security. In addition, it is also possible to send commands directly to the bridge or directly to a cloud-connected lock, that is, MQTT or similar protocols can be omitted or otherwise circumvented. In one embodiment, the bridge can be configured to be located within the firewall of a retail store (or other institution), while the retailer server is not.

[0148] Thus, the above method can provide multiple advantages. For example, the manufacturer's SKU can be universal, resulting in efficiencies in production and inventory. Since QR codes and web applications can be used, the end user does not have to download an application, which is a known friction point for adoption. The URL is easy for retailers to set up in the dashboard without printing or installation. The private encryption key is kept safe by the manufacturer so that no bad actor can hijack the command and control system to open the lock in an unauthorized manner. Command and confirmation messages can occur through a standard communication platform (e.g., a proxy) that is well known and easy to use and program to reduce development time for retailers.

[0149] Additionally, there is a potential security issue with all QR codes: the ability for bad actors to replace the code with a fake code that directs the user to a malicious site that mimics the real site. One way to combat this is to have a blacklist registration of URLs. Mobile phone smartphone manufacturers can use this blacklist to create a security warning whenever an end user attempts to access a URL on the blacklist. The blacklist will need to be populated, which can happen in a variety of ways. For example, a credit card company that will receive a fraud report can investigate the source of the fraud, find the URLs, and submit them. Retailers can find these fake URLs in their establishments and report them. Finally, end users can report any fake URLs directly on their smartphones.

[0150] To incentivize consumers to access the purchase of locked items, embodiments of the present invention may provide retailers with the ability to upsell to consumers. Similar to the example embodiments discussed above, consumers may use a computing device with a software application or website to scan a QR code or NFC tag on a security device. The consumer may then be given two options: (i) press the actuator to call a sales employee to open the security device, or (ii) press the actuator to watch an advertisement (e.g., a 15-second advertisement), after which the security device will automatically open. This allows consumers to self-service items from the security device. If the item is not purchased via authorized access to the security device, the consumer can take the item to the checkout counter for purchase, with the greatest inconvenience being the time spent watching the advertisement, which may be much shorter than waiting for an employee, and also giving consumers a fixed time they know they will have to wait rather than an unknown time for an employee to arrive. In addition, the technology may deter thieves who attempt to "swipe" multiple items from a display as quickly as possible (e.g., sweep multiple items from a display hook). Forcing them to watch the advertisement for a predetermined period of time increases the risk to thieves by slowing down the speed at which they can sweep items from a display or security device. In some cases, the advertisement may include an offer or other incentive to the consumer, such as a coupon or rebate.

[0151] One or more exemplary embodiments of the security system and method have been described above. Embodiments of the security system have been shown and described herein for the purpose of illustrating and enabling one of ordinary skill in the art to make, use, and practice the invention. However, one of ordinary skill in the art will readily appreciate and realize that many variations and modifications may be made to the invention without departing from the spirit and scope of the invention. Therefore, all such variations and modifications are intended to be covered by the appended claims.

Claims

1. A security system comprising: a computing device comprising wireless communications circuitry; a plurality of security devices configured to protect one or more items from theft and to wirelessly communicate with the computing device via the wireless communication circuitry, each of the plurality of security devices configured to be locked to prevent removal of the one or more items from the security device and to be unlocked to allow removal of one or more of the items from the security device, each of the security devices storing at least one identifier and at least one public encryption key; a manufacturer server, the manufacturer server maintaining a plurality of private encryption keys; as well as a retailer server configured to send commands to control any of the security devices, Each of the plurality of security devices is configured to communicate wirelessly with the manufacturer server directly or indirectly, wherein the computing device is configured to request access to any one of the security devices and to communicate directly or indirectly with the retailer server, Wherein, the retailer server is configured to send a command directly or indirectly to any one of the security devices to unlock the security device based on the at least one identifier of the security device if the user of the computing device is authorized to access the security device and the at least one public encryption key is decrypted by one of the multiple private encryption keys of the manufacturer server.

2. The security system according to claim 1, wherein: The computing device is a cellular telephone. 3 . The security system of claim 1 , further comprising a bridge for facilitating communication between the plurality of security devices and the manufacturer server.

4. The security system according to claim 3, wherein: The bridge is configured to communicate with each of the security devices for obtaining the at least one public encryption key of each of the security devices.

5. The security system according to claim 4, wherein: The bridge is configured to facilitate an association between a single user and any one of the plurality of security devices.

6. The security system of claim 1, further comprising a bridge for facilitating communications between the plurality of security devices and the retailer server.

7. The security system according to claim 6, wherein: The bridge is configured to send the command from the retailer server to the secure device.

8. The security system of claim 1, further comprising a redirect server configured to redirect communications with the computing device from the manufacturer server to the retailer server in response to communications between the computing device and any one of the security devices.

9. The security system of claim 1, further comprising a message broker configured to facilitate communications between the manufacturer server and the retailer server.

10. The security system of claim 9, wherein the message broker is MQTT.

11. The security system of claim 1, wherein: The retailer server is configured to send a command, directly or indirectly, to any of the security devices to unlock the security device if the user of the computing device is authorized upon completion of the financial transaction.

12. The security system of claim 1, wherein: The retailer server is configured to send a command, directly or indirectly, to any of the security devices to unlock the security device if the user of the computing device is authorized based on the identification of the user.

13. The security system of claim 1, wherein: Each of the security devices includes a scannable code, and wherein the user is configured to request access by scanning the code with the computing device.

14. The security system of claim 13, wherein: The scannable code is an NFC tag.

15. The security system of claim 13, wherein: The scannable code is a QR tag.

16. The security system of claim 13, further comprising a redirect server, wherein the scannable code includes a URL code having the at least one identifier of the security device, and wherein the URL is configured to redirect communications to the retailer server.

17. The security system of claim 13, wherein: The at least one common encryption key comprises a rolling encryption key.

18. The security system of claim 13, wherein: The at least one common encryption key includes a rolling encryption key and a fixed encryption key.

19. The security system of claim 1, further comprising a customer interface configured to display an advertisement within a predetermined period of time prior to unlocking the security device.

20. The security system of claim 1, wherein: The computing device is configured to receive, via the retailer server, confirmation that the one or more items have been purchased.

21. The security system of claim 1, further comprising any combination of the features of any one of claims 1 to 20.

22. A security system comprising: a computing device comprising wireless communications circuitry; a plurality of security devices configured to protect one or more items from theft and to wirelessly communicate with the computing device via the wireless communication circuitry, each of the plurality of security devices configured to be locked to prevent removal of the one or more items from the security device and to be unlocked to allow removal of one or more of the items from the security device, each of the security devices storing at least one identifier and at least one encryption key; a manufacturer server, the manufacturer server maintaining a plurality of encryption keys; a bridge for facilitating communication between the plurality of security devices and the manufacturer server, each of the plurality of security devices being configured to wirelessly communicate with the manufacturer server via the bridge; a retailer server configured to send commands to control any of the security devices; as well as a redirection server configured to redirect communications with the computing device from the manufacturer server to the retailer server in response to communications between the computing device and any one of the security devices, wherein the computing device is configured to request access to any one of the security devices and communicate with the retailer server via the redirect server, Wherein, the retailer server is configured to send a command directly or indirectly to any one of the security devices to unlock the security device based on the at least one identifier of the security device if the user of the computing device is authorized to access the security device and the at least one encryption key is decrypted by one of the multiple encryption keys of the manufacturer server.

23. A method comprising: wirelessly communicating between a computing device and a plurality of security devices, the plurality of security devices configured to protect one or more items from theft, each of the plurality of security devices configured to be locked to prevent removal of the one or more items from the security device and unlocked to allow removal of one or more of the items from the security device, each of the security devices storing at least one identifier and at least one public encryption key; wirelessly communicating, directly or indirectly, between each of the plurality of security devices and a manufacturer server that maintains a plurality of private encryption keys, requesting access to any one of the security devices using the computing device; communicating directly or indirectly with a retailer server; as well as If the user of the computing device is authorized to access the security device and the at least one public encryption key is decrypted by one of the multiple private encryption keys of the manufacturer server, a command is sent directly or indirectly from the retailer server to any one of the security devices to unlock the security device based on the at least one identifier of the security device.

24. A security system comprising: A computing device comprising: a memory storing computer executable instructions; Controller; and wireless communications circuitry; and a plurality of security devices configured to protect one or more items from theft, each of the plurality of security devices comprising a lock configured to be locked to prevent removal of the one or more items from the security device and to be unlocked to allow removal of one or more of the items from the security device, each of the plurality of security devices is configured to wirelessly communicate with the computing device via the wireless communication circuitry for unlocking the lock and purchasing one or more of the items, wherein the computer-executable instructions are configured to cause the controller to communicate with a payment system and receive a confirmation from the payment system that the one or more items have been purchased, and The computer executable instructions are further configured to cause the controller to send a command to unlock the lock protecting the one or more items that have been purchased via the wireless communication circuit.

25. The security system of claim 24, wherein: The computing device is a cellular telephone.

26. The security system of claim 24, wherein: The confirmation from the payment system is embedded in the SDK code including the command.

27. An apparatus, system, method and / or computer program medium comprising any combination of the features disclosed herein.

Images