Abstract: A docking station has a housing with an open top compartment formed therein for storing a security key in a locked condition when not in use at a checkout station for opening media security containers. A slide member is moveable by a three position key operated tumbler between locked and unlocked positions across the storage compartment opening. A cam is slidably engageable with the slide member and is moveable by the tumbler for moving the slide member between the locked and unlocked positions. An alarm deactivation switch is actuated by the cam when the tumbler is rotated by the tumbler key to a third position past the locked position. The alarm communicates with a sense loop extending through a flexible expandable cord attaching the key to the housing. An LED provides a visual indication that the alarm is activated.

Abstract: Small, optimized sequences of binary 5-tuples, representing filter rules, which achieve space efficient packet filtering. A post-match procedure table allows dynamic and extensible packet processing. Packet filtering is accomplished by processing filter rule statements and procedure statements, entered by a user in a rules file, to generate 5-tuple filtering rules and a procedure table, and loading the filtering rules and procedure table into the filter interpreter. A filter interpreter then applies the resolved filtering rules for each packet received at the network adapter. When a filtered packet matches a rule, a specified function is invoked.

Abstract: Software can be automatically distributed in stages. An administrator can specify a stage indicating software to be distributed to nodes in a network. The nodes can be organized into groups. Administration functions can be performed via an application service provider scenario. For example, a browser-based user interface can be used to configure nodes and indicate an appropriate software stage for the nodes. Agent software at a node can query a data center to discover what software is appropriate. Software of the proper stage can be provided and installed. The software can be provided via an application service provider scenario, and automatic installation can be achieved even if the nodes are behind a firewall. A versionless arrangement can be implemented.

Abstract: A dispenser for items of merchandise is formed as a wire rack having an entrance opening for placing the items into the dispenser and a discharge opening for removal of the items from the dispenser by a customer. A pivotally moveable gate located adjacent the discharge opening permits removal of the items one at a time, with a time delay being required between the removal of each of the items to retard shoplifting. The gate also produces an audible sound when moving toward the open position to further reduce possible shoplifting.

Abstract: A method and apparatus for remote installation of network drivers and software. The present invention provides for the remote installation of a rerouting driver into the network driver interface in the path between one or more media access control units and one or more protocol drivers in a computer system. Code in the network driver interface is disabled, patched to insert the rerouting driver, and then re-enabled. The disabling and re-enabling of the code is performed such that the computer system does not have to be restarted following installation of the patch.

Abstract: A security device including a base having a plurality of holes extending therethrough. A noose cable is attached to the base and extends out of the base on one side and passes through the base on another and may be wrapped around merchandise to be secured against theft. A switch is carried by the base and depressed by a lid carried by the base so that when the lid is raised, an alarm will sound. A fastener extends through the lid of the base and secures the noose cable from removable such that when the lid is in the closed position, the head of the fastener is beneath the lid and access to the fastener is prevented. The base is electrically connected to an alarming station in order to provide power to the switch and to provide the alarming function associated with the noose cable security device.

Abstract: One alternative and optional method of the present invention provides a secured item specific identification system incorporating the steps of identifying an item to a determined degree, generating a first identifying code for the item, generating a second code and separately providing the same to a partner, enabling an access to secure identification data regarding the item upon an authorizing use of both the first and second code. In other optional alternative embodiments, the first and second codes may be optionally linked or alternatively provided in alternative and adaptive composite symbology formats.

Abstract: The present invention provides an informational article on which variable information is inserted. The informational article includes a substrate having a zone for inserting the variable information. A visual security device, such as an optically variable ink, a special film, or combinations thereof is disposed in the zone on the substrate. The visual security device is sized and arranged such that at least a portion of the variable information is adapted to being inserted over the visual security device.

Abstract: A method and system for transmission of digital content via e-mail with point of use digital rights management is disclosed. The secured access rights to the digital content may be customized for individual recipients by the sender, and may evolve over time. The access rights are enforced according to a time-dependent scheme. A key server is used to arbitrate session keys for the encrypted content, eliminating the requirement to exchange public keys prior to transmission of the digital content. During the entire process of transmitting and receiving e-mail messages and documents, the exchange of cryptographic keys remains totally transparent to the users of the system. Additionally, electronic documents may be digitally signed with authentication of the signature.

Abstract: A security storage container has a primary security feature that is adapted to be locked and unlocked with an appropriate key. A secondary security feature is activated when the security storage container is opened without first unlocking the lock with the key. In one embodiment, the secondary security feature includes prongs that are moved to an extended position when the primary security feature of the container is defeated. In the extended position, the prongs will at least damage the item of merchandise protected by the security storage container. The extended position of the prongs may also further lock the item of merchandise within the security storage container.

Abstract: Vending machines are provided having a door and a cabinet having an interior region for storing and distributing objects, such as canned or bottled beverages. Several vending machines locks are provided for locking the door to the cabinet to prevent unauthorized access to the interior region of the cabinet.

Abstract: Network traffic is monitored to detect attempted inter-network communications, including attempts by devices internal to the network to communicate with resources external to the network and attempts by devices external to the network to establish VPN sessions with resources internal to the network. Upon detecting an attempted inter-network communication, the device responsible for initiating such communication is identified. Then, it is determined whether the identified device is running a valid protection agent. If so, the attempted inter-network communication is permitted. If not, the attempted inter-network communication is blocked in compliance with a network security policy and the identified device is prompted to download and install a protection agent from a designated storage location, or to activate a previously installed protection device. The prompt may include a hyperlink for initiating download of the protection agent.

Abstract: A security system for use in an enclosure which may be an ATM. The security system includes a first electronic module housed within the enclosure and at least one removable container for storing valuables. A second electronic module is housed within the removable container. The modules communicate with each other wirelessly within the enclosure. The first module includes one or more inputs for receiving an output of at least one sensor for sensing an activity predetermined to indicate a security threat, a first logic circuit in communication with the inputs, and a first wireless communication device connected to the logic circuit. The second electronic module includes a second wireless communication device; a second logic circuit connected to the second communication device; and at least one output for sending an activation signal to a theft deterrent device in response to a pre-programmed sequence of events, including at least one communication from the first module.

Abstract: A lockable display hook adapted to display items of merchandise in a retail environment includes a lock that directly engages the rod assembly of the display hook. The lock is configured to securely lock to the rod assembly without the need for teeth or notches to be formed in the rod assembly. One embodiment of the display hook provides an end assembly that prevents sweeping while allowing quick loading of merchandise.

Abstract: Software can be automatically distributed in stages. An administrator can specify a stage indicating software to be distributed to nodes in a network. The nodes can be organized into groups. Administration functions can be performed via an application service provider scenario. For example, a browser-based user interface can be used to configure nodes and indicate an appropriate software stage for the nodes. Agent software at a node can query a data center to discover what software is appropriate. Software of the proper stage can be provided and installed. The software can be provided via an application service provider scenario, and automatic installation can be achieved even if the nodes are behind a firewall. A versionless arrangement can be implemented.

Abstract: Providing a user with assurance that a computer is secure based on a vulnerability assessment completed by a browser-compatible scanner operating on the computer. If the scanner finds a vulnerability, the scanner can inform the user that the machine is or may be compromised, or repair the vulnerability. For example, the scanner may be able to repair the vulnerability of the workstation. In the alternative, the scanner can provide the scan results to a network server. If the vulnerability assessment shows that the workstation is compromised, or if the possibility of remote compromise is high, the network server can decline to provide network services to the workstation.

Abstract: A security device a plurality of cables which are securable about an item of merchandise with a locking member and a cable-tightening mechanism each connected to the cables in a spaced apart manner. The locking member includes a key portion for unlocking the tightening mechanism when the cable is removed from the item. The tightening mechanism includes a spool and a ratchet mechanism. Alternate embodiments for locking and unlocking the ratchet mechanism are disclosed. The tightening mechanism carries sense loops which if compromised actuate an onboard audible alarm. The cables are part of one or more of the sense loops. The device is configured to sound a security gate alarm upon passing through the gate and upon simply reaching a certain distance from the gate. The tightening mechanism includes a housing having a flip-up handle for tightening the ratchet mechanism to tighten the cable.

Abstract: A security collar for placement around the base of a display package to prevent removal of a cover from the base to protect merchandise contained therein. An EAS security tag is contained in the collar. A magnetically actuated lock mechanism is formed on the collar to lock the collar in a closed locked position on the display package. The collar includes a pair of semi-circular housing members pivotally joined at one end and swingable between open and closed positions. The collar is formed with spaced projections which trap the base and portions of the cover therebetween to secure the collar about the base and cover. Each of the housing members each locking teeth which mutually engage each other to secure the housing members in locked position.