Skip to content

Checking Out Security Solutions

​SEASONED RETAIL LOSS PREVENTION VETERANS CAN recall the days of checking credit card slips, examining cash-deposit line items, conducting spot audits, and physically counting marked-down items to stay on top of shrinkage and loss challenges. Today, loss prevention specialists rely on increasingly sophisticated technology, especially in the area of point of sale (POS). Among the technologies bringing benefits are cloud computing, video analytics, radio frequency identification (RFID), automated cash management systems, and access control via smart keys.

Point of Sale

Several technologies are helping retailers catch problems at the checkout counter. Chief among these are the cloud and video analytics. To take advantage of new technology, almost all large retailers tie their POS systems to a surveillance camera system. Cameras play a critical role when deployed to monitor cash transactions at the point of sale. When tied to POS data, this video technology becomes even more powerful.

There are two ways in which this video can be helpful. First, the footage is married to the register’s own data records. In comparing the two, it is possible to catch discrepancies that may indicate accidental loss or intentional theft.

For example, the video would reveal instances when items on the bottom shelf of a shopper’s cart passed through a checkout lane without being rung up. That could be an honest oversight or theft. The video might also reveal possible “sweethearting”—when a cashier gives items to customers for free by pretending to scan bar codes or by using other tricks.

An investigation can determine whether the cashier legitimately tried to scan the item but didn’t notice that either a technical error occurred or the scan was incorrectly performed. If the case involves an honest mistake, not malfeasance, the cashier can be given additional training.

At some retailers, the loss prevention team is small and doesn’t have time to review suspicious transactions. A solution in this case is to outsource the review task, but the solution itself can create security exposures because to do the task, third-party providers must have access to the retailer’s proprietary customer data and to its network.

Another problem with the concept of having a system that captures all POS transactions and marries video to data is the demand this places on IT infrastructure. Most retailers do not have the capital to invest in building an adequate IT infrastructure. The advent of the cloud, however, offers another option. The cloud makes computing capacity a service to be rented, rather than a product that has to be purchased at a high up-front cost.

The cloud also means that retailers can now store their POS and camera system data with an off-site host that is completely removed from the company’s private IT network. The retailer only transmits to the cloud the information that it wants to divulge.

It can also be useful to combine POS video footage with analytics. For example, ScanItALL by StopLift Checkout Vision Systems of Cambridge, Massachusetts, runs video of the cashiers’ and customers’ body motions through an analytic process. Mathematically analyzing the pixels of digitized video, the system studies how a cashier handles each item to determine whether it was properly scanned. It can interpret fraudulent behaviors, such as when a cashier covers up a bar code, for example.

Some POS systems can also be set to look for items that are left in the cart as they proceed through the checkout line. This can be especially important in self-checkout lanes.

LaneHawk by Evolution Robotics Retail, Inc., of Pasadena, California, uses cameras tied to the POS system to spot items in the bottom of the basket. The system also links the products it sees at the bottom of the cart to its database, which sends the UPC bar code of the item to the cash register, adding it to the transaction. LaneHawk is currently in use at more than 1,000 individual grocery stores in the United States. Evolution Robotics also has another version of the product for similarly identifying items left in the main section of the cart.

Carttronics of San Diego offers special modified shopping carts that cannot be removed from the retailer’s property and are automatically disabled if they have not traveled through the checkouts, putting a stop to full-cart walk-outs and bottom-of-the-basket theft attempts.


Another area where cloud computing is emerging as a benefit to retailers is in the real-time monitoring of video and alarm systems. In this case, alarm data is transmitted through the cloud to the vendor that responds to the alarms.

In this area, the change over to the cloud may be inevitable. Every day, voice over IP gains ground, and as the company AlarmCLOUD notes on its Web site, “The clock is ticking on landlines. The security industry has accepted that telcos will be pulling the plug on public switched telephone networks.” Alarm monitoring companies are faced with having to run IP receivers in house to accept IP signaling and are themselves turning to cloud services. For a monthly fee, companies such as AlarmCLOUD offer to save the alarm company the cost of equipment, labor, upgrades, and servicing.

Store Shelves 

Some theft occurs in the aisles and can’t be caught at the POS. There are systems to address this threat also.

For example, Evolution Robotics has a product called ShelfHawk that is meant to combat the growing organized crime tactic of shelf sweeping in which whole shelves of items highly valued for resale, such as diabetic test strips, are stolen in bulk by being swept into a booster bag (a bag commonly used by retail thieves), leaving the shelf bare.

The ShelfHawk system uses strategically placed cameras to watch selected shelves and to report on suspicious activities such as dwell time—the length of time a person spends in front of shelved items. A longer dwell time indicates that the customer may be waiting for a chance to steal what is there. When the cameras pick up someone spending too long in a particular area, the analytics recognize this and sound an alert so that staff can check on the situation.

The system has the added benefit to the retailer of recognizing when a shelf needs to be restocked, sending an alert when, for example, the last box of teeth whitening strips in a row is removed, leaving only an empty space.

To deal with theft of individual items, there are also tags. Traditionally, retailers worldwide made a large investment in tags that used electronic article surveillance (EAS) technology, the components of which include the hard tags seen clipped to merchandise, the detector/pedestals placed at shop egress points, and the deactivators and detachers used at the checkout counters.

While EAS systems have proven their worth in stopping thefts, or at least alerting staff that a theft is occurring, they cannot tell retailers what has been taken. For example, an EAS system will set off an alarm indicating that something is being stolen. By contrast, an RFID tag can tell the retailer that a black silk woman’s blouse selling at $125.99 was the item that slipped out the door. This ability to know which item was taken reclassifies losses from “shrink,” which is defined as unknown loss, to known losses that can help retailers pinpoint the items that are vulnerable and need additional protection within a store.

The system can also help identify vulnerabilities by department or store location. For example, if reports generated by the system’s database indicate that a number of watches have been stolen in store locations in a particular geographic area, these items can be moved to a locked case. In other regions where there has been no watch theft, the increased protection may not be needed.

The components of most RFID inventory control systems are the tags, the readers, and the software that usually runs on a standard PC, which is Windows based. Because RFID tags are contactless, their information can be captured by readers that are placed to cover an entire environment, unlike bar-code inventory management systems, in which a scanning beam must pass over the tag. They are also less susceptible to damage or wear that can destroy bar codes.

One example of RFID loss prevention systems newly introduced to retailers is the OPI Loss Prevention System by Optical Phusion, Inc. (OPI). The system combines wireless communications capabilities with passive RFID technology and software. Hand-held scanning terminals can be configured to scan retail products and return a product description and current retail price, making it simple and fast for a manager to walk through a store and create a complete inventory of items.

To catch shoplifters, each RFID chip returns a unique identifier when it passes through the zone covered by the RFID readers and antennas that are placed in the front doors of each store. When the RFID reader detects a tagged item, it passes the information to the OPI Loss Prevention Controller software, which then transmits a command to alarm. Jamison, another RFID development company based in Hagerstown, Maryland, has developed a converged RFID/EAS technology that is able to bring the technologies together for the retail platform.

Not far away are the days when this same technology will allow customers to merely push a shopping cart past a reader and swipe a debit or credit card to make payment without waiting for each item to be scanned. Inventories will be automatically updated and any items secreted on individuals buying other items will be read automatically and added to the bill.


Technology is also making it possible for stores to have some advance warning when trouble walks in the front door. For example, a facial recognition software system from T-Mobile scans the faces of incoming customers to see if any match a database of known previous shoplifters, bad-check writers, wanted criminals, and members of organized retail crime flash mobs.


The back office is another area where technology is being put to good use by security. For example, retailers are beginning to take full advantage of cash recycling systems that not only reduce staff time for certain tasks in the accounting office but also increase cashier accountability. These systems typically reduce the cash on hand in a retail store, create instant deposits, and can be tied to banks and armored car services for immediate provisional cash credit. The systems also limit cash access by employees, creating a deterrent to theft and armed robbery.

One cash managing system, The Revolution by Tidel of Carrollton, Texas, is now being used by a number of retailers including Whole Foods, Hy-Vee, and United Groceries. (Security Management looked at this system in depth in its February 2010 “Case Study” column.) The Tidel product employs a unit about the size of a large photocopier that combines a drop vault, touchscreen user interface, cash and coin counters and dispensers, and a biometric palm scanner.

When cashiers arrive, they don’t need to collect their day’s tills from supervisors who received them from bookkeepers who prepared them in the predawn hours. A cashier goes to the machine and places his or her palm on the reader. Once the unit recognizes the cashier, he or she picks up an empty till with an attached bar code, and the machine scans it, linking the till to the cashier for that shift. The till is then inserted into a slot and the unit automatically dispenses the correct amount of bills and coins. The cashier removes the till and scans the bar code off a canvas bag in which he or she will place all of the checks, coupons, rain checks, and any other “media” that are collected in the course of the day. The process takes less than a minute to complete.

Access Control

Access control solutions for retail have recently seen the coming of intelligent key systems. Resembling key fobs with a metal cylinder at the head, these keys are programmable in a way similar to standard access control cards, allowing the system administrator to set parameters such as times the key is active and store doors or display cases on which it can be used, all based on an employee’s duties. For example, the smart key may let a store clerk assigned to the jewelry department open the display cases there but not let that employee open a case in electronics.

Developed by Medeco of Salem Virginia, a division of ASSA ABLOY, the system also collects data on use and use attempts, so if an employee tries to use his or her key to gain access to a proscribed area, that attempt will be recorded and flagged when the data is downloaded from the key at the end of the employee’s shift. Data from the keys can also help managers pinpoint areas where employee training may have been lax. It can, for instance, note when a display case was incorrectly relocked.

Some retailers are also employing smart key systems on their truck fleet to prevent dishonest truckers from picking the locks on trucks, removing goods, and reselling them.

Enterprise Management

Some providers are offering Web-based analytic management tools. Such systems help companies make the most of their physical security data. The platform may be built to integrate and manage security, safety, and operational systems such as surveillance, access control, alarms, and exception reporting.

These solutions pull from several applications—video, access control systems, and internal assessment processes—for better decision-making. One example is the Encapsulon Control platform by Wren Solutions of Jefferson City, Missouri.

Today’s retailers exist in an era with fiscal constraints and persistent criminal threats. The challenges are great, but targeted use of technology can help retailers manage risk and preserve profits.

Keith Aubele, CPP, is president and CEO of Retail Loss Prevention Group, Inc., of Bentonville, Arkansas. He was previously the corporate vice president of loss prevention for Home Depot and divisional director of loss prevention for Wal-Mart. He serves as the vice chair of the ASIS International Loss Prevention Council.