The CUBE appears no different than a user accessing a web page

• The CUBE only makes outbound network requests, checking periodically for
  
• programming and firmware updates.
• Virus- and malware-proof
• No apps other than CUBE firmware are executable in the unit.
• Firewall
• The CUBE has its own firewall, providing an insular layer of protection within a client’s
• network.
  

End-to-end encryption

• Automatic firmware updates are encrypted before transmission, and firmware isn’t stored on the CUBE itself but on encrypted storage cards uniquely locked to specific CUBE units.

Ease of use without compromising security

• No local access or capability means no passwords are ever required; on-site personnel have access only to the CUBE’s operating features basic configuration and output volume.
• Always PCI DSS scan-compliant
• As industry-standard security protocols evolve, so does the CUBE firmware.
• Fast and efficient
• The CUBE implements tasks only as needed, eliminating slowdowns caused by background processing.

Limited Network Traffic. Seamless Integration. Security.

• With options for minimizing traffic in- and outflows and connecting to existing client networks, the CUBE is as seamless to integrate as it is secure.
• Less time connected to a network equals more security. Instead of always being logged on, the CUBE connects periodically to check for firmware and program updates via outbound HTTP/HTTPS requests and DNS lookups (outbound access is funneled through ports 80 and 443, and non-secured ports are not open to inbound access).

Customer options for network integration

• For smooth, easy integration into a client’s existing network, the CUBE can connect to the internet either directly or via a proxy server; in the latter case, proxy authentication can be used and a single, encrypted download to the server will service all networked CUBE units.

Multi-layered encryption

With the exception of firmware and program updates, which must be AES-encrypted before transmission or they will be rejected, the CUBE does not accept any inbound executable formats retrieved via HTTP/HTTPS, ensuring that it remains free of viruses and malware. When available, NTP is used for time synchronization, otherwise the CUBE utilizes HTP. 

Fast and efficient processing

When updating, the CUBE implements tasks strictly as needed, only downloading files that it doesn’t already have. If no content changes are in progress and the system is in a “steady state,” network traffic consists of live playback reporting and internal system diagnostics.

Best practices never go out of date

Exponential Solution (the creators of the CUBE) proactively monitor security industry best practices. It should also be noted that as a media player it is recommended that the CUBE be installed in a network segment segregated from a client’s cardholder data environment (CDE). Even in the absence of such segmentation, the CUBE’s multi-layered security features prevent it from materially influencing the PCI compliance of a network. With its adaptable architecture, the CUBE will always be PCI DSS scan-compliant.

CUBE using Store and Forward Technology to minimize the use of business bandwidth

The CUBE utilizes store-and-forward delivery — the program content is downloaded to the device once and music and messaging continue to play even if the network connection is offline. When playlists are updated, only new content is downloaded leaving more bandwidth available for other business needs. In an in store, background music application the CUBE will use 1/100th (or less) the bandwidth of streaming, the CUBE keeps your network fast and free for business. In contrast streaming requires a constant dialogue between hardware and the network, and can take up as much as 5GB of bandwidth each week. When the internet goes down, streaming products are limited to a small offline library until a network connection is reestablished. In a typical in store (background music) application, assuming 20 new song updates per week, the CUBE will typically utilize about 55MB/week of data.

CUBE Technical Specifications:

- Compact: 95mm x 95mm x 20mm, 277g

- Minimum 8GB solid-state storage: over 200 hours of 64 kbps audio

- Supports higher bitrate and stereo audio

- Scalable storage: industry-standard SD

- Low power: 2.5W - 5W power consumption

- International AC adaptor with pluggable prongs for USA/ Canada, UK, EU, Australia and more

- Powers from miniB USB

- 3 v2.0 USB ports

- LAN 10/100 Mbps Ethernet, RJ-45

- 2 line-out ports: 1 or 2 separate zones

- 1 line-in / mic input port

- Automatic firmware updates: network or USB

- FCC / CE / RoHS certification

- Connect a standard screen and keyboard to perform on-site diagnostics and/or setup. Diagnostics also available via text to speech and mobile phone or tablet.

Other Resources: