Control of data exchange

1. A control device for controlling data exchange between entities and item identification devices associated with said control device, each of said entities having associated therewith a data exchange device for exchanging data with one or more of a plurality of item identification devices with which said control device is associated, said data exchange device being arranged to provide authentication data indicative of the entity with which they are associated or indicative of a category of entity with which they are associated, said control device comprising:

an access policy storing unit for storing data indicative of access policies for each of a plurality of entities or categories of entities, said access policies relating to the extent to which an entity or category of entities is to be permitted to exchange data with one or more of a plurality of item identification devices with which said control device is associated;

a communication receiving unit for receiving authentication data from one of the exchange devices;

an authentication unit for establishing from received authentication data and from said access policy storing unit an access policy applicable to the entity or category of entities with which said data exchange device is associated, the applicable access policy being selected from the stored access policies in dependence on the received authentication data;

a communication providing unit for providing access data to said data exchange device, said access data enabling the exchange of data between said item identification devices and the entity with which said data exchange device is associated in accordance with the applicable access policy for that entity.

2. A control device according to claim 1 , the control device being arranged to provide and receive radio-frequency data.

3. A control device according to claim 1 , wherein

the control device is an active RFID device.

4. A control device according to claim 1 , wherein

said item identification devices are radio-frequency devices.

5. A control device according to claim 1 , wherein

said item identification devices are passive or semi-active RFID devices.

6. A control device according to claim 1 , said item identification devices being arranged to provide data relating to one or more items with which said item identification devices are associated.

7. A control device according to claim 6 , said item identification devices being arranged to provide item identification data.

8. A control device according to claim 6 , said item identification devices being arranged to provide item status data.

9. A control device according to claim 6 , said item identification devices being arranged to provide other types of data.

10. A control device according to claim 1 , said data exchange device being an RF reader device.

11. A control device according to claim 1 , said data exchange device being an RF writer device.

12. A control device according to claim 1 , said data exchange device being an RF reader/writer device.

13. A control device according to claim 1 , wherein

said access data provided enables decoding of encoded data provided by item identification devices.

14. A control device according to claim 1 , wherein

the said access data provided enables the item identification devices to be caused to provide data.

15. A control device according to claim 1 , wherein

the said access data provided causes data to be stored by said item identification devices.

16. A control device according to claim 1 , wherein

said data exchanged between item identification devices and entities comprises data relating to one or more of a plurality of attributes.

17. A control device according to claim 16 , wherein

said access policies indicate the attribute or combination of attributes about which an entity or category of entities is to be permitted to exchange data with item identification devices with which said control device is associated.

18. A control device according to claim 16 , wherein

said access policies indicate whether an entity or category of entities is to be permitted read, write, or read-and-write access in relation to data relating to said one or more attributes.

19. A control device according to claim 1 , wherein

said access policies indicate whether an entity or category of entities is to be permitted to delegate rights.

20. A method for controlling data exchange between entities and item identification devices associated with a control device, each of said entities having associated therewith a data exchange device for exchanging data with one or more of a plurality of item identification devices with which said control device is associated, said data exchange device being arranged to provide authentication data indicative of the entity with which they are associated or indicative of a category of entity with which they are associated, said method comprising:

storing data indicative of access policies for each of a plurality of entities or categories of entities, said access policies relating to the extent to which an entity or category of entities is to be permitted to exchange data with one or more of a plurality of item identification devices with which said control device is associated;

receiving authentication data from one of the data exchange devices;

establishing from received authentication data and from stored access policies an access policy applicable to the entity or category of entities with which said data exchange device is associated, the applicable access policy being selected from the stored access policies in dependence on the received authentication data;

providing access data to said data exchange device, said access data enabling the exchange of data between said item identification devices and the entity with which said data exchange device is associated in accordance with the applicable access policy for that entity.

21. A system for controlling data exchange between entities and item identification devices, said system comprising a control device associated with a plurality of item identification devices, and one or more data exchange devices each associated with one or more entities or categories of entities; wherein the or each data exchange device comprises:

a data exchange unit for exchanging data with one or more of a plurality of item identification devices with which said control device is associated; and

a data authentication unit for providing authentication data indicative of an entity with which the data exchange device is associated or indicative of a category of entity with which the data exchange device is associated;

and wherein said control device comprises:

an access policy storing unit for storing data indicative of access policies for each of a plurality of entities or categories of entities, said access policies relating to the extent to which an entity or category of entities is to be permitted to exchange data with one or more of said item identification devices with which said control device is associated;

a communication receiving unit for receiving authentication data from said data exchange device;

a data authentication unit for establishing from received authentication data and from said access policy storing unit an access policy applicable to the entity or category of entities with which said data exchange device is associated, the applicable access policy being selected from the stored access policies in dependence on the received authentication data; and

a communication providing unit for providing access data to said data exchange device, said access data enabling the exchange of data between said item identification devices and the entity with which said data exchange device is associated in accordance with the applicable access policy for that entity.