Safeguard Shopper Privacy and Ensure Retail Security in a Mobile First World

Digital signs, mobile payments, magic mirrors, stock-picking robots and many other smart devices are changing the retail shopping experience. Smart, connected devices create new, interactive experiences that keep shoppers engaged—and increase sales. That's why retailers are embracing Internet of Things (IoT) devices from the floor to the warehouse. In fact,杜松研究predicts that retailers will connect 12.5 billion digital signs, Bluetooth beacons and other smart devices to IoT platforms by 2021—a 350 percent increase from 2016.

随着零售商使用更多的智能设备并随着网络威胁的发展和数量的发展，网络安全和隐私成为更大的挑战。零售业已经是网络犯罪分子的主要目标。智能设备通常比传统的移动设备或台式计算机具有较低的安全标准，并且很难修补漏洞。这意味着领导者需要主动降低风险上升。

除了网络安全之外，成功取决于通过个性化购物体验在客户隐私和信任之间行走绳索。

Increase Sales while Protecting Shopper Privacy

Understanding customers' past purchases, preferences and their locations can help retailers deliver a memorable shopping experience, but cross the invisible line, and what's convenient to a shopper can transform into unacceptable behavior from the retailer.

互动的上下文和条件至关重要。让我们以使用移动参与度最大程度地减少跨购物影响的榜样。一家大型大型商店的购物者，他使用手机站在一个充满良好夏季农产品的过道上，访问专业电子零售商的网站可能会微不足道他可能正在比较价格。在这一点上，零售商可以提供价格匹配以使客户感兴趣。

但是如何？访问竞争对手网站后片刻的片刻，一份神奇地出现在购物者手机上的推动通知不仅仅是巧合。这更像是数字跟踪，甚至更糟，似乎零售商已经入侵了购物者的手机。

Now picture a nearby digital sign showing a "price match" ad. The retailer can offer the shopper a price match without being intrusive. If the promotion is included in the regular rotation of digital signage content, then it doesn't seem like the person's digital footsteps are being tracked. It is a happy coincidence that the store is willing to match the price.

Securing Wired and Wireless Networks

The rise of smart, connected devices typically doesn't come with a commensurate increase in the IT security budget. But fortunately, IT leaders can leverage many of the network and security tools they already use to create a more secure environment.

With PCI compliance a fact of operations, secure networking has long been a priority, and retailers have fortified their wireless networks so they can process payments securely. They've deployed strong authentication and access control solutions likeAruba Clearpass确定设备，执行政策并保护网络。

Let's say an Apple TV tries to connect to the retailer's network, but it's not an authorized device. With ClearPass, IT can automatically block that device until it is vetted. Similarly, a printer that doesn't support设备证书身份验证can be automatically assigned to the print VLAN, where it cannot talk to any secure devices. ClearPass can be used to profile all kinds of devices, from tablets to digital signs to surveillance cameras, ensure they use the appropriate VLAN, and only talk to the appropriate devices and systems.

零售商已密切关注确保无线网络以支持PCI要求，但是有线网络的安全性可以忽略。开关的端口，无论是在仓库还是在地板上，都可以开放且可能是恶意的手，都会产生风险。但是有每个端口隧道节点功能on Aruba switches, traffic from individual ports can be tunneled back to the mobility controller and policies enforced via a stateful firewall so that both wired and wireless traffic follow the same policies.

零售商还需要考虑谁持有该设备以及该人在物理位置的位置。

Vetting the Wandering Mobile POS

Mobile point of sale (POS) has taken off. Associates and shoppers like the convenience and mobile POS increases sales. But Apple iPad or Android tablets are a lot smaller than a traditional POS system sitting at the checkout, and devices can be misplaced or even stolen. Retailers need to protect the mobile POS system from mischief and malice.

使用移动设备管理（MDM）软件MobileIronor空调，与Clearpass结合使用，可以带来这种安心。如果有人窃取移动POS设备并将其越狱，那么强大的身份验证还不够。MDM可以检测到折衷方案，而ClearPass可以防止网络访问，从而减轻员工或其他不良演员的卡片浏览风险。

智能设备的位置也很重要。移动POS系统通常不会在商店中移动，因此如果设备出现在另一家商店中。ClearPass可以检测位置的变化并做出相应的反应，因此，如果某人无意间（或故意）将设备带到商店外，则当设备出现在新位置时，可以应用额外的身份验证。使用ClearPass，与多因素身份验证相结合时二人，在授予网络访问之前，该设备可以向用户询问更复杂的验证。

但是，如果有人窃取移动支付系统或监视摄像头，然后将其带回去怎么办？无论是一天还是几个月，已经离线的设备都需要更高的审查水平。Clearpass可以做到这一点。当该人将设备带回商店并试图登录网络时，ClearPass可以识别设备，检查其安全姿势并将故障票发送到Helpdesk，以便必须明确授权访问权限。

To whom a device talks also matters. For instance, there's no reason for a surveillance camera to communicate with any systems other than the surveillance system's server and the manufacturer's website for software updates. With ClearPass, retailers can ensure that IP cameras only have local LAN access and a single firewall entry for software updates. Using ClearPass also eliminates the burden of manually configuring all the cameras in all the locations. Security is enforced consistently and IT is free to do more strategic work.

观看不良行为

强大的身份验证，网络访问控制和MDM为零售网络创造了安全的基础，许多零售商正在探索使用安全分析以提供其他保护措施的使用。

Aruba IntroSpect使用基于AI的高级机器学习，可视化和即时法医见解来查找受损的用户，系统和设备，因此可以在损坏零售商的运营和声誉之前对其进行补救。Introspect在企业范围内集成了基于行为的攻击检测和法证事件的调查和反应。这为智力提供了在持久损害之前停止攻击的智能。

Learn More

Retail faces more cyber attacks than any other industry, and the costs of a data breach can be devastating. Aruba can help retails create memorable shopping experiences using innovative new technologies while mitigating cyberrisk.学习怎样。