RF point of sale and delivery method and system using communication with remote computer and having features to read a large number of RF tags

[0001] This application is a continuation-in-part of application Ser. No. 09/981,219 filed on Oct. 16, 2001. application Ser. No. 09/981,219, claims the benefit of Provisional Application No. 60/241,907, filed on Oct. 20, 2000.

[0002] The present invention relates to methods and systems for distributing products to customers. More particularly, the invention relates to a system that tracks the use of products using radio frequency (“RF”) tags and provides information to a central computer to enable automated restocking, inventory, tracking, or reordering of the products.

[0003] A variety of paper-based, electronic, and Internet ordering systems are available and in use today. In addition, a number of inventory tracking systems, including systems that use bar coding are also in use. Beyond bar codes, it has been proposed that inventory tracking can be accomplished using RF tags. However, commercially acceptable RF systems, particularly systems that are able to track hundreds of items in relatively small areas, have not yet been developed. Furthermore, commercially acceptable integrated systems that allow consumers to order and receive goods at a location proximate to where the goods are used and that also automatically, and with limited human intervention, track usage and initiate reordering are also not available.

[0004] Accordingly, there is a need to improve the distribution and tracking of goods so that consumers experience distribution of goods at a location proximate to where the consumer will use the goods without requiring paper or computer ordering. There is also a need for a distribution system that is able to track numerous RF tagged items positioned in relatively small areas or volumes.

[0005] The invention provides a system and method where a user need only find the product of interest and take that product. As compared to most Internet-based systems and methods, the invention is “clickless.” In other words, the invention requires little or no manual input from users. The invention provides a system for distributing a plurality of products. Each of the products has a radio frequency (“RF”) tag. As used herein, radio frequency means electromagnetic radiation that lies between audible and infrared radiation, including microwave radiation. Each tag is encoded with a unique identifying code. In one embodiment, the system is accessed by individuals possessing a radio frequency user badge with an identifying code. Alternatively, the system could rely on magnetic swipe cards, password systems, biometric devices (such as a retinal scanner, thumb or finger print reader, voice identification unit, or the like), bar code cards, or other systems for limiting access to authorized individuals.

[0006] The system includes one or more cabinets, refrigerators, similar storage units, (generically referred to as “micro-warehouses”) or even secured rooms that are stocked with the RF tagged products and accessed by individuals through one of the mechanisms described above. In one embodiment, each micro-warehouse defines an RF cavity, has a door that may be equipped with a lock (such as an electric-actuated lock), an antenna or antenna array mounted on or in the micro-warehouse, a client controller (or similar programmable device) coupled to the lock and the antenna, a badge or key reader, and an output or user-feedback device such as a light, audio device, or display. Using a signal from the badge or key reader, the client controller checks the identity of the individual accessing the micro-warehouse, such as by reading the code of the user badge. The user feedback device is then activated to indicate whether the individual attempting to access the micro-warehouse is authorized to access the unit. If the code or other identifier matches stored records of authorized users, the client controller opens the door and the user may remove desired products from the micro-warehouse. Once the user closes the door (and in some embodiments, the door is locked), the client controller performs a scan of the products remaining in the micro-warehouse to determine the identity of each of the products. The client controller then generates a message including the identity of each of the products or other message related to the products taken. That message or a second message based on the first is sent to a server. The server tracks product and user information automatically, that is, without relying on user input. The server also generates orders for products taken from the micro-warehouse by the user. The server can be programmed to automatically place those orders. This eliminates the need for the customer to re-order consumed items.

[0007] Alternatively, the system can operate like a vending machine, but with the product exit chamber, the area behind a door through which a user reaches for the product after it has fallen from its storage area, arranged as the RF cavity. Tags on products that fall into the pick up area can be read before or as the user picks them up.

[0008] Each user badge may also include billing information and form-of-payment information in addition to having identification information. As should be apparent, billing information could take the form of the entity to be billed, which may or may not be the individual associated with the tag. Form-of-payment information may include account information, credit card information, or the like.

[0009] In one embodiment, an array of antennas is positioned within the door of each MW. Each antenna may have a transmission line of sight and be configured to emit a signal at one or more predefined frequencies. The antenna array generates an electromagnetic field within the MW. The products are positioned in one or more bins, compartments, or similar devices located within the MW. Preferably, the electromagnetic field is altered within the cavity defined by the micro-warehouse through the use of reflectors or devices that move the antennas within the array. In one embodiment, material that is reflective to RF signals is placed near the door/cabinet gap to prevent the escape of RF energy. This helps reduce accidental reading of tags outside the MW but near the gap, and exposure of people and things outside the MW to RF radiation.

[0010] In one preferred embodiment, tagged products are positioned such that each tag on each product is organized in an orderly fashion such that 1) the likelihood of a tag being shadowed by an RF absorbing substance within the cavity is reduced, 2) the likelihood of one tag sharing energy with another due to too close proximity is reduced, and 3) the orientation of the tags located in the hinge RF areas, and in the nulls of the cavity, increases the RF cross-section and energy absorbency of each such tag. Some of the above three desirable characteristics may be achieved by placing the tags such that they are generally orthogonal to the transmission line of sight (as opposed to being positioned generally parallel) of at least one antenna within the array. In addition, at least two of the plurality of products may be spaced a distance from each other such that energy sharing is reduced. (“Energy sharing” is a phenomenon where one or more tags positioned in close proximity share energy from an electromagnetic wave traveling through the volume such that one or more of the tags fails to receive sufficient energy to be energized and, therefore, fail to emit an identifying signal.) In one form of the invention, the distance is based on the wavelength of the signal(s) from the antenna array and is a fraction thereof. In one preferred embodiment, the distance is about 3 to about 6 cm.

[0011] It is also preferable that each tag have the ability to cloak itself for a predetermined amount of time. The amount of time may be in a range that is based on the maximum number of tags in the micro-warehouse and the temperature of the tags. In one embodiment, this time is about 1-5 seconds when the tagged products are stored at a temperature of −20° C. However, the amount of time is variable and depends on the temperature inside the MW, the tag type, the tag transmission algorithm, and the existence or not of a wake or decloak function. The cloaking time is selected to allow de-cloaking such that another scan can be done within an algorithmically acceptable time period.

[0012] A controller (often referred to as a “client controller”) is coupled to the antenna array and is operable to control the antenna array such that a series of scans or runs are performed. In a preferred embodiment, the controller is operable to perform a baseline run, an inventory run, and a background run. The controller generates messages indicative of changes in the presence of tagged items within the micro-warehouse and stores those messages in a queue or buffer. The controller also calculates an integrity value, compares that value to a predetermined integrity value, and reports the comparison in the message.

[0013] As is apparent from the above, it is an advantage of the present invention to provide a method and system of inventorying and distributing products. Other features and advantages of the present invention will become apparent by consideration of the detailed description and accompanying drawings.

[0014] In the drawings:

[0015] FIG. 1 is a schematic illustration of a system embodying the invention.

[0016] FIG. 2 is a schematic diagram of servers and a client device used in the system shown in FIG. 1.

[0017] FIG. 3 is a schematic illustration of fulfillment, inventory, and other information flow among components in the system shown in FIG. 1.

[0018] FIG. 4 is a schematic illustration of a system embodying the invention.

[0019] FIG. 5 is a schematic illustration of information flow among components of the system shown in FIG. 4.

[0020] FIG. 6 is a perspective view of an exemplary micro-warehouse in the form of a freezer.

[0021] FIG. 7 is a cross-sectional view of the door of the micro-warehouse shown in FIG. 6.

[0022] FIG. 8 is a cross-sectional view of a door of a micro-warehouse configured according to another embodiment of the invention.

[0023] FIG. 9 is a perspective, partially phantom view of a chest capable of holding multiple drawers suitable for use in the micro-warehouse of FIG. 6 and a drawer.

[0024] FIG. 10 is a schematic diagram of a control system used in a micro-warehouse.

[0025] FIG. 11 is a diagram of an exemplary embodiment of the control system shown in FIG. 10.

[0026] FIG. 12 is a schematic diagram of electromagnetic fields within a micro-warehouse.

[0027] FIG. 13 is a perspective view of an exemplary packaged product illustrating possible locations for RF tags on the product.

[0028] FIG. 14 is a flowchart of software used in one embodiment of the invention.

[0029] FIG. 15 is a flowchart of software of one embodiment of the invention.

[0030] FIG. 16 is a flowchart of software of one embodiment of the invention.

[0031] FIG. 17 is a flowchart of software of one embodiment of the invention.

[0032] FIG. 18 is a flowchart of software of one embodiment of the invention.

[0033] FIG. 19 is a flowchart of software of one embodiment of the invention.

[0034] FIG. 20 is a flowchart of software of one embodiment of the invention.

[0035] FIG. 21 is a graph of product tag read times versus the number of tagged products in a micro-warehouse.

[0036] FIG. 22 is a flowchart of software of one embodiment of the invention.

[0037] FIG. 23 is a flowchart of software of one embodiment of the invention.

[0038] FIG. 24 is a flowchart of software of one embodiment of the invention.

[0039] Before embodiments of the invention are explained in detail, it is to be understood that the invention is not limited in its application to the details of the construction and the arrangements of the components set forth in the following description or illustrated in the drawings. The invention is capable of still other embodiments and of being practiced or being carried out in various ways. Also, it is to be understood that the phraseology and terminology used herein is for the purpose of description and should not be regarded as limiting.

[0040] FIG. 1 illustrates an exemplary system 25 embodying the invention. The system 25 includes two servers (maintenance and commerce) 26 and 27 that create and maintain user lists, perform inventory, account, ordering functions, and monitoring functions, such as micro-warehouse status, monitoring temperature, and other faults. Servers 26 and 27 may communicate with a client (and, more particularly, a computer or similar device such as the controller in a micro-warehouse (“MW”) discussed below) using standard protocols such as TCP/IP, UDP, or other protocols over a network 28. The network 28 may be the Internet, a telephone network, a wireless network, power line carrier (“PLC”) network, or other type of network and combinations thereof. In the embodiment shown, servers 26 and 27 include standard hardware and operating system software (not shown). Running on top of the hardware and operating system software is a MW enterprise application 29. The MW enterprise application 29 accesses a profile database 30 that includes a registration module 31, an order history module 32, an account set-up module 33, and a stock request module 34. Each of the modules 31-34 is maintained for each client coupled to the server 27. The modules may be configured with web content designed to be accessible by a system administrator using protocols for the World Wide Web section of the Internet.

[0041] As best seen by reference to FIG. 2, the MW enterprise application 29 performs numerous functions. Broadly, the MW enterprise application 29 controls the administration of the radio frequency identification (“RFID”) badges or other user badges or keys (discussed below), manages communication sessions with clients connected to the server 27, maintains an inventory of products for each client connected to the servers 26 and 27, checks inventory of MWs, and in some embodiments, other MWs local to the specific MW of interest, before ordering a product, manages security of communications, provides system administration functionality, and monitors and maintains the health of clients connected to the servers.

[0042] The registration module 31 (FIG. 1) provides part of the inventory functionality of the server 27 by providing access to information regarding the location of clients connected to the server 27. In one embodiment of the invention, the clients take the form of MWs. The registration module also provides access to information regarding sales persons assigned to a particular MW and the identification, location, and similar information for each MW. The registration module 31 may access a MW database 34A.

[0043] The order history module 32 provides a history of orders for each MW 36 and product preferences for each MW 36. The account set-up module provides administrative screens for payment authorization, user information, and similar information. The stock request module 34 controls inventory replenishment based on usage and on specific customer requests and similar information.

[0044] The server 27 also accesses a commerce engine 35 that uses information received from a client (or MW) to generate orders that are delivered to a fulfillment infrastructure (not shown). The fulfillment infrastructure produces products to be distributed using the system and method of the invention. The information may be used by a manufacturing infrastructure and marketing, customer relation management (“CRM”), billing, and other systems and functions (all not shown). For example, the invention may be used in the distribution of life science research products such as enzymes, assays, cloning vectors, competent cells, and the like. (Of course, a wide variety of non-biological products could be distributed using the invention.) The information provided by the server 27 is used in the manufacturing infrastructure to ensure proper production of products according to the demand for such products. As noted above, the server 27 may be coupled to a plurality of clients or MWs. An exemplary client in the form of the MW 36 is shown in FIG. 1. While only one client is shown, the number of clients connected to the server 27 is limited only by the server's internal capacity and the capacity of the network 28.

[0045] The MW 36 may take the form of a refrigerated cabinet, a freezer, or other storage container. A secured storeroom, similar location, or other defined area could also be outfitted with a client controller and other components, as described herein, and be used to store products. In the embodiment shown, the MW 36 includes a door 37. While it is preferred, it is not required that the MW 36 have a door. Devices (such as light curtains) that sense when access to the interior of the MW is being attempted may also be used. As noted, in another embodiment, the system may utilize a defined area to enclose the tagged products rather than a cabinet. The defined area uses an access point (not shown) to serve as its entryway. The products within the area are fitted with identification tags and specifically positioned in the area to be read by a RF inventory interrogator (such as a controller 45 and antenna array (discussed below)). Product-scans begin when a sensor (such as, e.g., a proximity sensor) senses a user passing through the access point. The access point is controlled by a processor, such as the client controller 45, and is able to control doors, portals, alarms, or other mechanisms to restrict access to the area and products.

[0046] As shown, the MW 36 may also include an electric actuated lock 39, a proximity sensor 40, and a user feedback or, more generally, an output device that may take the form of an audio device or light 41. Other output devices such as a voice synthesis device, a display screen, and the like may also be used. The MW 36 is configured with an antenna array 43. The antenna array 43 is coupled to the client controller 45. In one embodiment, the invention may include an antenna array with six vertically or circularly polarized antennas. The antenna array 43 is a RF receive and transmit system that communicates with transponder devices or tags (discussed in greater detail below). In one embodiment, each tag is a passive tag and powered by energy from the antenna array 43.

[0047] The MW 36 may include a specialized badge or card reader 47 (generically a “key reader”) in the form of a magnetic card swipe device, an antenna, a fingerprint reader, or similar device. The reader 47 is coupled to the client controller 45 via a communication link 49. The MW 36 may also include internal and ambient temperature sensors 55 and 56. The temperature sensors 55 and 56 are coupled to the client controller 45 to provide temperature information to the client controller. Additional information may be provided to the client controller through optional input devices. The location of the MW 36 may be monitored by a global positioning system (GPS) device (not shown) plus inertial frame recognition for fine measurement and for interpolation between GPS satellite acquisitions. Motion and shock of transport may be monitored with an accelerometer (not shown). The voltage, current, and other characteristics of electrical supply lines may be monitored and provided to the client controller 45 by a power-line-monitoring device (also not shown). The on/off duty cycle of the current supplied to the refrigeration compressor can be used, with the internal and ambient temperatures, to indicate the relative health of the compressor. Additional input devices, such as cameras, microphones, sensors, etc., could be coupled to the client controller to monitor environmental and other conditions.

[0048] A smartcard reader (not shown) may also be coupled to the controller 45. A smartcard, in addition to identifying the customer for admittance purposes, can contain a preloaded monetary equivalent that can be debited at the time of door closure for any products taken during the door open session.

[0049] The client controller 45 includes software to carry out several functions that are discussed in greater detail below. If desired, the client controller 45 may be a consumer grade device, such as a Palm Pilot® personal digital assistant, Packet PC device, or a personal computer, modified according to the teachings herein. Depending on the hardware used, the client controller 45 may be configured with a graphical user interface (“GUI”) to facilitate interaction between the system 25 and its users.

[0050] The client controller 45 includes software (discussed below) which may interrogate the RF tagged products within the MW 36. The interrogation process involves sending signals from antennas and receiving signals from passive, transponder RFID tags. Preferably, interrogation is accomplished in such a way as to eliminate or reduce interference problems that are typically associated with reading RF signals from multiple devices. The system 25 could also be implemented with active tags (not shown), although presently available active tags need to be improved so as to perform in the temperatures that the embodiments of a system for distribution of life science research products are expected to operate within and at roughly the same cost and power consumption.

[0051] In one embodiment of the system 25, one or more RFID access badges 75 (FIGS. 1 and 3) are be generated. Preferably, the RFID badges 75, as well as the other RFID tags (discussed below) are passive transponder tags. Preferably, the RFID badges 75 are encoded with unique identifying information from the account set-up module 33 based on digital signatures. In addition, it is preferred that the digital signatures encoded on the RFID badges 75 used by restocking services provide one-time access to a specific MW, and thereafter expire, and be disposable. One-time access badges may be set to expire after a certain amount of time or at a set time. However, the badges 75 may also take a form that can be enabled again for one-time access at the next restocking event. The RFID access badges may be fixed on a carton of products 80 (FIG. 3). Alternatively, they may be delivered separately to the facility where the MW of interest is located. Alternatively, they may be the badges of field personnel or designated on-site authorized support personnel.

[0052] As best seen by reference to FIG. 3, the carton of products 80 includes a plurality of individual products 90 each with an identification tag 95. Each identification tag 95 may be structurally the same as an RFID badge 75, but coded with different information and configured such that the digital signature on tag 95 will generally not expire. In one form of the invention, each tag 95 has a 16-bit group identification code and a 32-bit item identification code. The 16-bit group identification code may be programmed with information such as the manufacturer or distribution channel of the product. The latter allows routing of the transaction involving a product to the proper enterprise system. The 32-bit item identification code is used to provide descriptive information regarding the product such as serial number, product type, date, lot number, and similar information, or a unique ID, which corresponds to such information in a database on a server.

[0053] Once all the products 90 have been fitted with unique RFID tags 95, the products may be shipped in the carton 80 to a designated MW such as the MW 36. The carton 80 is packed according to a fulfillment request that is based on either an initial order from a customer (not shown) or MW specific business rules followed by the server 27. The carton 80 may be fitted with RFID access badge 75 or the RFID access badge 75 may be shipped separately to the location of the MW of interest. If fitted with an RFID access badge 75, the carton 80 may be shipped by a delivery service contracted to deliver the package to the MW 36. Once the carton is delivered, the recipient or user may use the RFID access badge 75 to open the door 37 of the MW 36 by passing RFID access badge 75 in front of the reader 47. Client controller 45 reads the digital signature of the RFID access badge 75 and confirms reading of the code by actuating a user feedback device such as a voice synthesis module or the light 41. Since, the server 27 provides a locally based user list to the client controller 45, the client controller 45 oversees authentication of the digital code read from the RFID access badge 75. Client controller 45 checks the authenticity of the read code by matching the code to the user list. Client controller 45 may then optionally read the temperature sensors 55 and 56 and transmit temperature information to the server 26. If used, the temperature sensors 55 and 56 are preferably read on a periodic basis, with the temperature information being transmitted to the server 26 each time the temperature is read. Client controller 45 can also be programmed to transmit temperature data if the internal temperature falls beneath or above a predetermined range. In many instances, it will be important to ensure that the temperature of the MW is within an appropriate range to store the products 90. If the temperature of the MW 36 is within an appropriate range, and the user is authenticated, the client controller 45 then actuates the lock 39 to open the door 37 (of course, the MW need not be equipped with the lock 39). If the temperature of the MW 36 is not within an appropriate range, then access to the MW 36 may be prevented by maintaining the lock 39 in a closed state. This allows a refrigeration unit (not shown) associated with the MW 36 to cool the interior space of the MW 36 to a desired temperature before ambient air is allowed into the MW 36 by opening of the door. This also provides for product 90 integrity during a power failure.

[0054] Once the door 37 opens (which may be sensed by the proximity sensor 40), or access to the interior of the MW 36 is gained, a communication session between the MW 36 and server 27, which may be segmented based on appropriate events to optimize user response and network usage, begins. Having full access to the MW 36, the employee of a carrier or logistic service (such as UPS, Airborne Express, etc.) who delivered the carton 80 now proceeds to place the individual items 90 into the MW 36. Once the carton of products 80 is empty, the delivery employee then closes the door 37, and removes the carton, if necessary. The proximity sensor 40 senses the closing of the door 37. The client controller 45 senses the status of the sensor. Preferably, the lock 39 (if used) resets automatically after being unlocked for a predetermined time, for example five (5) seconds. The user has that predetermined time to open the door. Power to the antenna array 43 is disabled once the door 37 opens. When the door 37 closes or access is prohibited, a scan of the products 90 placed within the MW 36 is performed. Upon completing the scan, the client controller 45 sends a change-in-inventory message 100 to the commerce server 27. To ensure integrity of the inventory change billed to the customer, the client controller 45 employs an integrity algorithm when the MW 36 is scanned. The algorithm is based on statistical information, historical information, and other factors including RF algorithms and delay data.

[0055] As will be explained further below, it was found, for one embodiment, that to accurately determine the number of tagged items in a MW 36 (i.e., to provide acceptable integrity in the system), it is best to scan the tagged items multiple times. Further, in the embodiment where the MW takes the form of a freezer, refrigerator, or other cabinet, achieving integrity generally requires choosing a superset of tagged items from all scans as well as noting the set that represents the majority set (over 50%) of the scans, the number of scans in non-cloaked mode (which may be an empirical number, found to be ten for the MW 36 illustrated in FIG. 6), and the number of scans in the cloaked mode (which for the same embodiment was empirically found to be three). To achieve greater system integrity (which in one embodiment is no more than one error in five-thousand tagged items), information from scans or interrogations is held on the server 27 for a predetermined amount of time (e.g., twenty-four hours). During this time, and while the subject MW is not being accessed by a customer, the controller 45 performs background inventory checks. The background inventory checks are used to increase the inventory sample population data set to statistically significant levels whose cross section corresponds to the 1 in 5000 level. Preferably, any anomalies found are sent to the server 27 where they are used to modify information held on the server 27.

[0056] The MW 36 may be accessed by a customer at the MW location using a separate RFID badge 75 (or other identifying badge or key) shipped directly to that customer. Alternatively, and as noted above, the reader 47 may be configured as a smartcard, a magnetic card swipe device, a barcode device, a fingerprint reader, or some similar device that controls access to the MW 36. Regardless of its exact configuration, the reader preferably reads the badge or key, compares the ID information contained in the key with the list of authorized users stored in the client controller 45, and if the user's key matches one of those authorized, the client controller 45 acknowledges authorization by generating an output such as by lighting the light 41. The list of authorized users is sent to the client controller 45 and updated as needed by the server 26. The server 26 may be configured with the capability to authenticate a user's key as well. Once authentication takes place, the client controller 45 then opens the door 37 allowing the customer or user to access the interior of the MW 36. The customer then removes one or more products 90 from the interior of the MW 36 and then closes the door 37. Once the door is closed, client controller 45 scans the products 90 in the MW 36 and sends an inventory message identifying the missing or added products 90 to the server 27. The server 27 compares the previous inventory prior to opening to the current inventory. From the comparison, the server 27 determines the missing or added items in the MW 36. The inventory information is then communicated to the commerce engine 35, which preferably stores the information for future use for both marketing and inventory functions. Receipts for the used products can then be sent via electronic mail or printed and shipped via regular mail to the customer at the MW location. Invoicing can also occur using other electronic and non-electronic communication mechanisms.

[0057] The inventory message can be used for other purposes as well. For example, the inventory message includes information regarding individual products 90. Therefore, the amount of time a particular product 90 spends in any MW 36 may be recorded by the server, as well as the product's temperature history. If time is recorded, it is also possible to compare the amount of time any particular product 90 spends in a MW 36 to a shelf life or acceptable usable life for that product. Temperature history can also be stored and compared to other data. If the shelf life is passed, then an expiration message, such as a pick list, may be generated and sent to the MW 36 or an electronic mail address of a user of the system to inform the user that certain products should be removed from the MW 36 and not used. Temperature history and time sent by the MW 36 to the server 27 may also be used to calculate a “storage-degree-day” value to for each product 90 in the MW 36. This value may, in turn, be used to make an activity projection and expiry threshold for the subject products 90. The administrator of the MW 36 may then use this information to remove expired products from the MW 36.

[0058] In yet another implementation, the inventory message may be used to determine the type of products 90 in the MW 36. If any of the products present within the MW 36 are subject to a recall by the manufacturer, the MW 36 may be placed in a “lock down” condition, whereby access to the MW 36 is denied until an administrator or other authorized individual removes the recalled product or otherwise addresses the situation. In addition to its use to protect against the use of recalled products, the lock down feature is useful for controlling the distribution of potentially spoiled or degraded products and other products where exacting product specifications and quality controls are desired, such as pharmaceutical products and controlled substances.

[0059] FIGS. 4 and 5 illustrate additional features of the system 25. As shown in FIG. 4, the system 25 may be implemented such that the MW 36 communicates with a telephone system or similar access point 105 through a wireless communication link 107. The access point 105 may be connected to a network service provider such as an Internet service provider (“ISP”) 110. The service provider 110 may provide a connection to the network 28 (which is shown as the Internet in FIG. 4). FIG. 5 provides additional details concerning the exemplary fulfillment infrastructure noted above. Servers 26 and 27 may be configured in a cluster 112 with a middleware server 114, which in one form of the invention takes the form of an extensible markup language (“XML”) middleware server 114. The cluster 112 is protected by a firewall 116 and communicates with an enterprise computer 118 (such as a mainframe) which may run various enterprise resource planning (“ERP”), CRM, manufacturing, and other business process programs. The enterprise computer 118 communicates with an enterprise database 120, which is also accessible by the server 27. It should be understood that the cluster 112 may consist of any number of hardware or software servers and that the exact configuration may be modified depending on how the invention is implemented. In general, it is possible to combine functionality on one server or to separate out operations and functionality on multiple servers beyond those shown and described herein.

[0060] In the embodiment shown, information received from tagged items 90 within each MW 36 is sent to the web cluster 112, particularly the server 27, in an XML format. The XML formatted messages are transferred from the server 27 to the middleware server 114, which hosts XML middleware 120 (FIG. 5) such as Biz Talk® software. The XML software 120 communicates with other software/systems such as ERP system 124, web ordering system 126, an RFID badge, key, or passkey administration system 128, and a MW administration system 130. The ERP system 124 may be configured to assign RF tags 95 to selected products or lots of products; assign identities to each MW 36; handle inventory planning; handle re-supplying of MWs; and handle sales orders. The web ordering system 126 may be configured to process customer order inquiries; inventory inquiries; passkey updates; and purchase order updates.

[0061] FIG. 6 illustrates an exemplary micro-warehouse in the form of a freezer 230. In the embodiment of the invention described and illustrated, components are tuned to work efficiently in a micro-warehouse having a volume of about five cubic feet (about 142 liters) and that can hold hundreds of RF tagged items. However, other embodiments are possible, including, for example, a 21 cu. ft. (about 425 liters) freezer and a 15 cu. ft. (about 595 liters) room temperature hospital supply cabinet. The freezer 230 includes a housing 232 with an opening 234 and an interior 235. A door 236 is attached to the housing 232 such that the door 236 can be closed to occlude the opening 234 and opened to provide access to the interior 235 of the freezer 232. A number of shelves 238 are positioned within the interior 235. Each shelf 238 may hold one or more cabinets 240. Each cabinet 240 may include one or more drawers 242. Each drawer 242 may hold multiple packaged products (discussed below). Products, particularly larger products, may also be positioned within a bin 244. The package dimensions of larger products often create a desirable separation of tags (which, as discussed below, reduces energy sharing).

[0062] The freezer 232 can be constructed using a standard freezer modified and equipped as described herein. For example, the door 236 may be constructed from a door provided with a standard freezer. Insulation in the standard door is removed or otherwise formed or positioned and various components needed to scan RF tags on products stored within freezer 230 (e.g., in the drawers 242 in the cabinets 240) are added. The freezer 230 may be equipped with a strip (not shown) of RF reflective material positioned around the perimeter of opening 234 to prevent or reduce the escape or leakage of RF energy.

[0063] As best seen by reference to FIGS. 6 and 7, the door 236 includes a front panel 250, which in one embodiment has curved sides such that a cavity or depression 252 is formed by the panel 250. Insulation 254 is positioned within the depression 252. Near the center of the panel 250 the insulation 254 is hollowed out or otherwise formed or positioned such that a controller 256 (discussed further below) may be positioned within the door 236. A second portion of the insulation 254, near one corner of the panel 250, is also hollowed out or otherwise formed or positioned such that a badge or key reader 258 or similar device may be positioned within the door 236. The insulation 254, the controller 256, and the key reader 258 are maintained within the depression 252 by a mounting plate 260. Preferably, the mounting plate 260 is made from metal. The mounting plate 260 supports an array of antennas 261. In one preferred embodiment, the array of antennas 261 includes antenna 262, antenna 263, antenna 264, antenna 265, antenna 266, and antenna 267. (FIG. 6). Although six antennas are shown, the number and positioning of the antennas within the door 236 is dependent on a variety of factors, such as antenna gain, beam shape and directionality, transmitted power, RF cavity geometry, reactivity and reflectivity, convenience of location, distance from transmitter, cost, antenna-antenna interference, effective use of antenna beam volume, prevention of RF energy escape from cavity, antenna size and shape, antenna-tag orientation, antenna multiplexing pattern, and other factors. Thus, the invention is not limited to the array shown and other arrays could be used and may be more suitable for different micro-warehouses. The array of antennas 261 can also either singly, or in some combination, be rotated through a small arc by using one or more actuators or similar devices to shift the beam interference pattern or electromagnetic field in the RF cavity, for example, to mitigate any RF nulls or shadows. The antennas may also be activated at different times and patterns to shift the beam interference pattern or alter the electromagnetic field within the RF cavity.

[0064] The presence of shelves 238, cabinets 240, drawers 242, products, and tags may affect the electromagnetic field within the freezer 230. While most of the items just mentioned are preferably made from substantially RF transparent material, they nevertheless can block or diminish the strength of RF signals. Furthermore, the tags on the products and the products themselves are not made from RF transparent material and they may block or otherwise interfere with other tags receiving RF signals. These phenomena can be variously known as shadowing. The effects of shadowing may be reduced by positioning tagged products in the cabinets 240 and drawers 242, bin 244, or in other compartments, receptacles, or devices that can help provide separation.

[0065] The waves from each antenna and reflections off of the interior surfaces of the freezer 230 interact to create an electromagnetic field with many nulls (areas where waves combine to cancel each other such that there is insufficient energy to energize passive RF tags). The effects of nulls may be reduced by moving the field within the interior of the freezer 230 at a speed and with a pattern such that any nulls generated change position over time. Alternatively, this can also be done by changing the geometry of one or more reflective surfaces in the RF cavity, such as with an acute sawtooth pattern, or by adjusting the power to minimize internal reflected power, or by selection or variation of antenna power and frequency. In some cases, more than one of these alternatives is used. Preferably, reflectors such as the reflector 670 (FIG. 12) are used. (As shown, the reflector 670 is positioned at the rear of the freezer 230, but other placements within the freezer are also possible.) However, actuators, pivots, and other devices could be used to move the antennas 262-267 to generate many different interference patterns and alter the position of nulls in the interior 235 such that no tag is positioned at or within a null for any significant length of time. For example, as shown in FIG. 8 the antennas 262-267 could be mounted on pivots 269 and coupled to small, electrically or pneumatically powered actuators 270 located within the cavity 252 and mounted on the mounting plate 260. Antennas suitable for use in at least some embodiments of the invention include Huber & Suhner model 2400/70/910/CP antennas, which are available from commercial sources. Preferably, the antennas 262-267 are protected by a RF-transparent radome 272. The radome 272 also helps position the antennas 262-267 at desired locations along the door 236. As will be discussed in greater detail below, the controller 256 sends and receives signals from the antennas 262-267. Signals transmitted by the antennas 262-267 are used to excite passive RF transponder tags 270 (FIG. 13) attached to products 272 (FIG. 13) stored within the freezer 230 or applicable MW. In preferred embodiments, the products are in the drawers 242 of the cabinets 240 or bins (when larger products are stored). Signals generated by the transponder tags 270 are received by the antennas 262-267 and processed by the controller 256.

[0066] Before discussing embodiments of the invention in greater detail, some premises of their design, particularly the designs shown in FIGS. 6 and higher, need to be addressed. First, for those embodiments implemented in a micro-warehouse, RF cavity considerations are important. Second, the particular embodiments described are designed to be compliant with Part 15 of the regulations issued by the United States Federal Communications Commission (“FCC”). Part 15 of the FCC regulations places limitations on antenna powers and frequencies that may be used in systems, such as the current one, where RF tags are scanned. In order to meet the requirements of Part 15 as well as the requirements of scanning numerous tags within a relatively small volume (or RF cavity), an antenna frequency in the GHz range (or microwave range) was chosen. In particular, the inventors discovered that a frequency of about 2.45 GHz was best suited for the applications discussed herein. Nevertheless, alternative embodiments of the invention could be configured to operate at different power ratings and frequencies (for example, MHz embodiments), as would be apparent to one of ordinary skill in the art after reviewing the designs and teachings set forth herein.

[0067] FIG. 9 illustrates an exemplary cabinet 240 used in the freezer 230. The cabinet 240 includes a top 280, a bottom 282, a rear 284, and sides 286 and 288. In the embodiment shown, the cabinet 240 includes four bays 290. Each bay 290 is configured to accept a drawer 242. Each drawer includes a pull knob 300 or similar device and a plurality of angled separators 302. The angled separators 302 define a plurality of slots 304 in which packaged products 270 with RF transponder tags 272 may be positioned. The separators 302 are configured to position products within the interior 235 of the freezer 230 such that tags 272 on the products 270 contained within any one drawer 242 are maintained at a minimum separation distance and, in one embodiment, in a generally orthogonal position with respect to the transmission line of sight of the antennas located most proximate to the subject drawer 242. Orthogonal positioning is not necessary, however. The purposes of spacing tagged products include reducing energy sharing among and between proximate tags such that each tag on each product within the freezer 230 is energized at its requisite level, which for one embodiment is a minimum of about 0.23 mW/cm². In the embodiment shown, the distance between the separators 302 may be based upon the frequency of the signals from the antennas 262-267. In particular, spacing corresponding to a fraction of, and in one preferred embodiment, approximately ½ of the wavelength of the 2.45 GHz excitation signal (approximately 3 to 6 cm) has been found to reduce energy sharing among the tags. Preferably, the smallest possible spacing is used and shorter separation distances than those specified have been found to be adequate in some circumstances, particularly where other parameters such as frequency, antenna power, and others are different from the particular examples provided herein.

[0068] Instead of drawers and cabinets, bins or similar items with separators could be placed directly on the shelves or surfaces within the freezer 230. In addition, in some applications, the impact of energy sharing may be reduced through the selection of frequency, RF power, and transponder design (mainly size) such that products can be placed in a random or haphazard manner within the freezer 230.

[0069] FIG. 10 schematically illustrates one exemplary embodiment of the architecture of the controller 256. The controller 256 includes a central processing unit or processor 400 that receives time signals (e.g., time of day) from a real-time clock 402. In one embodiment, the real-time clock is synchronized periodically to a standard time reference, such as the atomic standard clock at the National Institute of Standards (“NIST”), connected to the real time clock 402 through the network 28. Synchronization of the real-time clock 402 helps ensure accuracy in time stamping the transactions (e.g., taking and placing tagged products in the freezer 230) controlled by the controller 256. The processor 400 receives inputs from an optional biometric device 404, a badge or key reader or similar device 408, and the antennas 262-267. The antennas 262-267 receive information from the tagged products 270 within the freezer 230. The tags 272 on the products 270 produce identifying signals in response to being excited by signals transmitted from the antennas 262-267. The processor 400 sends signals to the antennas 262-267 through a controller 412. The controller 412 provides a command signal to a multiplexer 413, which addresses each antenna 262-267. One controller suitable for use as the controller 412 is an SCS 511 scanner with 100 398 multiplexer available from Single Chip Systems (“SCS”) Corporation, San Diego, Calif. The interrogation operation (energization of and then reading of signals emitted by the tags) performed by the controller 412 and antenna array 261 will be discussed in further detail below.

[0070] The processor 400 reads and writes data to a memory 414. The processor 400 also controls a display 416, which is used to communicate with users of the freezer 230. The display 416 may be a simple lighted logo display which when lit indicates authorization of access to the freezer 230 and when unlit or lit in another color indicates denial of access to the freezer 230. A proximity sensor, e.g., the sensor 420, may be positioned on the door 236 or around the opening 234 to provide information to the processor 400 regarding whether the door 236 is opened or closed or the area comprising the MW has been accessed. Information relevant to operation of the freezer 230 and protection of the products therein, such as temperature, power status, and the like (sometimes referred to as “operational status,” “heartbeat,” or “health” information), is received over one or more input lines represented by communication link 422 from temperature, power, and positioning sensors, which are represented by the box 424. Communication between the processor 400 and the servers 26 and 27 (or server cluster 112) may be accomplished using a variety of technologies and hardware. FIG. 10 illustrates a wireless system 425 that is connected to an access port 430 via a communication link 432. 802.11b wireless links, available from many vendors, are suitable for use in the invention. In one preferred embodiment, wireless links from Aerocomm are used. The access port 430 may take the form of a modem or network interface device which may, in turn, be connected to an appropriate and compatible communication link such as a landline 434, wireless network 436, local area network 438, or the like. The access port 430 ultimately connects to a communication link or network (such as the network 28) that is linked to the server cluster 112.

[0071] FIG. 11 illustrates one implementation of the processor 400 shown in FIG. 10. The implementation includes an example of the processor 400 in the form of a M16C/80 chip from Mitsubishi. As would be apparent to those of ordinary skill in the art, a variety of other chips could be used. The processor 400 receives a clock signal from an oscillator 600, power from a supply circuit 601, and time signals from the real-time clock 402. Software instructions used by the processor 400 are stored on a non-volatile memory (such as EEPROM) 602. The memory 602 may be implemented using a 512 kB Flash memory integrated circuit 603 and a 512 kB SRAM integrated circuit 604.

[0072] Operational status (“health”) and related information of the relevant MW is received from a MW temperature sensor 605 and an ambient temperature sensor 606. A battery monitor 608 monitors power supplied to the processor 400. A current switch 609 is used to monitor the on/off duty cycle of the current supplied to the refrigeration compressor (not shown) in the freezer 230. Information from the switch 609 as well as information from the internal and ambient temperature sensors 605 and 606 can be used to determine the relative health of the compressor.

[0073] The processor 400 is connected to a power failure/lockdown circuit 610. The power failure lockdown circuit 610 is coupled to the supply circuit 601 and works in conjunction with an alarm circuit 612. If power is cut off to the processor 400, the power failure lockdown circuit 610 causes the alarm circuit 612 to generate an audio signal in order to alert users to the power failure condition. In addition, the lockdown/powerfail circuit locks the lock 613 (FIG. 10) on the freezer 230 in order to prevent additional access to the freezer. This action protects against inventory theft and assists in maintaining the internal temperature of the freezer (which is important to protecting products therein) by maintaining the integrity of the insulated volume of air within the freezer.

[0074] In the embodiment shown in FIG. 11, two mechanical switches, a door switch or sensor 614 and a key switch 615, are used. The sensor 614 is equivalent to the sensor 420 and provides and indication of whether the door 236 is open or closed (or whether ingress or egress to a controlled or restricted access area has occurred as detected by some other sensor). The key switch 615 provides a mechanical mechanism for rebooting the processor 400 (a “hard” reboot). In addition, when turned to an off or disarm position (not shown) the key switch 615 provides an input to the processor 400 that causes the processor 400 to shut off With the processor 400 shut off, the freezer 230 may be operated, if desired, as a normal freezer without any access restriction or inventory monitoring. As should be apparent, it is preferred that distribution of the key or keys compatible with the key switch 615 be limited to service or other authorized personnel.

[0075] The processor 400 sends control signals to an electromagnetic lock (if used) on line 617, which is coupled to an electromagnetic actuator 619 in the lock 613. Information regarding the stability of the freezer 230 is provided by an accelerometer 621. The accelerometer 621 can detect vibration or other motion caused by a variety of situations such as improper positioning of the freezer 230 or an attempt to tamper or otherwise obtain access to the freezer 230 by breaking the door 236 or lock 613 (if used).

[0076] The processor 400 may control an output light such as a logo light 624, which may be used to display the brand name of the manufacturer of the products placed within the applicable MW 36. The processor 400 may also provide output indicative of granting or denying access to the freezer 230 to a user through green LED 626 and red LED 628. Audio output, such as processor failure or similar status information, is delivered to an audio circuit 630. The processor 400 also receives inputs from an implementation of a badge or key reader in the form of reader 636. A reader suitable for use in the invention is a Visonics Key Reader, available from Visonics Inc.

[0077] Communication between the processor 400 and other devices such the server cluster 112 may be accomplished using a dual universal asynchronous receive transmit (“UART”) integrated circuit 638. For example, the circuit 638 may communicate with the wireless system 425. The circuit 638 may also communicate with a GPS system (not shown) through an interface circuit 640. Communication between the processor 400 and the controller 412 occurs through two lines 642 and 644. The controller 400 may also communicate to a maintenance computer through a connector interface circuit 650.

[0078] FIG. 12 illustrates a simplified field model of the electromagnetic field within the freezer 230. Each antenna in the array 261 has a line of sight or bore sight represented by a straight line emanating from the respective antenna 262-267. Electromagnetic waves having a frequency of about 2.45 GHz travel outward from each antenna 262-267 into the space defined by the walls of the freezer 230 (i.e., the RF cavity). The energy of the waves diminishes. The model shown includes two lines indicating where energy of the waves is at about −10 dB and at about −20 dB level.

[0079] FIG. 13 illustrates an exemplary packaged item in the form of product 270 that may be stored in the freezer 230. In the embodiment shown, the product 270 includes one or more vials 702 containing a biological assay. The product 270 also includes packaging that includes a pouch 704 and a periphery 706. The vials 702 are positioned within the pouch 704. Each product 270 also includes one tag 272, preferably a passive RF tag. FIG. 13 illustrates multiple possible locations for the tag 272 on the periphery 706 (shown in phantom) and the pouch 704. The tag 272 may be a folded-dipole, read-only tag, but other tags having other antenna geometries, such as bow-tie, may be suitable in some embodiments. Read-only tags suitable for use in at least some of the embodiments discussed and illustrated are available from SCS Corporation. As noted, in at least one embodiment, it is preferred that each product 270 be placed in one of the drawers 242 so that it is generally orthogonal to the transmission line of sight of those antennas 262-267 that are adjacent to the subject drawer 242. It is also preferable that the tag 272 be positioned on a portion of the packaging such that it will not be bent when placed within one of the drawers 242. Placement of the tag 272 on the pouch 704 provides a location that is less subject to bending than positions on the periphery 706. Alternatively, a rigid tag substrate or a rigid cover label may be used to prevent bending.

[0080] Having described much of the mechanical and hardware aspects of embodiments of the invention, additional details of the software will be further described. As noted above, in general, the controller 256 activates the antenna array 261. The antennas 262-267 emit signals that energize the tags 272 on the products within the freezer 230. Each tag 272 emits an identifying signal. The identifying signals from the tags 272 are received by the antennas 262-267 and delivered to the controller 256.

[0081] As may be apparent, the energization of multiple tags in a relatively small, defined volume (e.g., the RF cavity defined by the interior walls of the freezer 230) causes the tags 272 to simultaneously or nearly simultaneously emit identifying signals. The signals interfere with each other such that identifying any individual signal from any one specific tag 272 is difficult, and in some cases nearly impossible. In order to read numerous tags 272, a “cloaking” system can be used. In general, cloaking refers to shutting down or otherwise disabling transmission of the tag once it has been energized and identified by an interrogator (for example, controller 256). While cloaking is generally known, the inventors developed the specific use of the cloaking techniques described herein, including the specifications for minimum and maximum cloak time, and the cloak time distribution, with respect to RF cavity temperature.

[0082] The controller 256 executes inventory control software. In the embodiment described, the software carries out six basic steps. First, the controller 256 is initialized. Second, a baseline scan is performed. Third, access to the freezer 230 or relevant micro-warehouse is controlled based upon sensing the presence of and determining the validity of a user passkey using the badge or key reader 258 or similar device. Fourth, the operational status or health of the micro-warehouse is checked. Fifth, the inventory level of products is checked after a user has accessed the micro-warehouse (as sensed, for example, by closing of the freezer door 236). Lastly, information gathered by the controller 256 is communicated to the server cluster 112.

[0083] A more specific definition of the procedures performed by the inventory control software is set out in Table 1.

TABLE 1
Scan	A single request for a list of inventory identifiers
	(“Inventory IDs”) (i.e., identifying codes stored in the tags) with no
	duplicates. The scan continues until:
	(a) a specified time limit has been reached,
	(b) a specified rate of IDs per second is exceeded, or
	(c) a specified limit of interval time between tag reads has
	been reached.
	There are two modes of execution,
	1. cloaked, and
	2. uncloaked.
Run	A series of one or more Scans continued either until
	(a) a specified number of Scans has been reached,
	(b) a specified time limit has been reached,
	(c) a specified integrity level has been reached, or
	(d) an event (such as an RF power failure) has occurred
	which terminates a scan,
	Each of (a)-(d) is a mode of execution, and one or more modes
	can be requested. A run is terminated on the first occurrence of a mode.
	Each Scan is separated by a specified time interval.
Inventory ID	A 6-byte, binary hexadecimal string, unique to 244 values. The
	Inventory ID identifies a tagged product in a micro-warehouse.
Integrity Level	A percentage expressed as “0.90.”
Inventory List	A single list of all Inventory IDs present in a micro-warehouse
ReadTime	The amount of time elapsed from the start of a Scan to the last tag being
	read. This time may also be a set and includes the time
	elapsed to the reading of each of any number of tags.
ReadTemp	The temperature of any one tag as reported by the tag during a
	Scan (assumes that system is implemented using tags that are
	capable of reporting their temperature).
ScanTime	Time limit for one Scan
ScanInterval	Time between tag ReadTimes in one Scan
NumScans	Number of Scans to perform in a Run
ScanWaitTime	Time to wait between Scans for de-cloaking
ReadRate	Rate of tags read per second during one Scan

[0084] As noted in Table 1, the read time (or for the specific embodiment discussed, “ReadTime”) of a scan is the elapsed time from the start of a scan to the reading of any or all of the tags in the field generated by the antennas. The read time can be collected in either the non-cloaked or cloaked mode. The read time (which can also be a set of read times) can be sent to the server cluster 112 as part of each transaction that results from a scan. The read time can be used as a composite indicator of several operating parameters, such as temperature, product tag position in the RF cavity, RF interference in the cavity, etc. For instance, a gradual lengthening of the read time(s) for all tags in a RF cavity can correspond to an increase in interior temperature. It is possible to quantify a temperature change from the shift in a tag versus read time curve (such as the curve 725 shown in FIG. 21). As another instance, the shape of the curve of tag versus read time for the last few tags that were read can be used as an indicator of an RF anomaly in the RF cavity that is preventing the tags from getting enough power to respond. In this case, the normally linear curve becomes exponential for the last few tags. Operating parameters read from other sensors in the RF cavity, such as the temperature sensor, can be used with the read time curve to predict the condition that resulted in the change in the read time curve.

[0085] In one embodiment, the inventory control software includes three classes of runs: a base line run, an inventory run; and a background run. Definitions for Methods corresponding to these runs are set out in Table 2.

TABLE 2
Method	Function
Baseline Run	A run in cloaked or uncloaked mode to
Output: IntegLvl, ReadTime, ReadTemp)	establish the starting inventory list.
Input: (NumScans, RunTime, IntegLvl,
ScanInterval, ScanWaitTime, ScanTime, ReadRate)
Inventory Run	A run or runs in uncloaked (or cloaked)
Output: (PlusInventoryList,	mode to determine a new inventory list.
MinusInventoryList, IntegLvl,	Uses master inventory list established at
ReadTime, ReadTemp)	baseline, and returns the change in
Input: (NumScans, RunTime, IntegLvl,	inventory between the master inventory
ScanInterval, ScanWaitTime, ScanTime,	list and the new inventory list as plus delta
ReadRate)	inventory and minus delta inventory.
Background Run	A continuous series of scans in cloaked or
Output: (PluslnventoryList,	uncloaked mode until a termination event
MinusinventoryList, IntegLvl,	occurs, such as a user presenting a badge
ReadTime, ReadTemp)	or key to request entry.
Input: (NumScans, RunTime, IntegLvl,
ScanInterval, ScanWaitTime, ScanTime, ReadRate)
Reveal Inventory
Output: (MasterInventoryList)

Classes of Runs

[0086] Baseline Run

[0087] A run in cloaked mode to establish the starting inventory list.

[0088] If IntegrityLevel is not specified, the actual read integrity level is returned, that is, the number of times the majority scan list occurs. Creates the first master inventory list, consisting of the superset of all inventory IDs read throughout the baseline scans. The read integrity is returned even when an input integrity level has been set.

[0089] Inventory Run

[0090] A run or runs in uncloaked (or cloaked) mode to determine changes to the inventory list. Uses the superset of all inventory run scans as the new list of inventory. Uses master inventory list (from baseline and/or background) or most recent temporary master inventory list, whichever is more recent, and returns change in inventory between master inventory list and new inventory list, as plus delta inventory and minus delta inventory. Creates new temporary master inventory list.

[0091] Background Run

[0092] A continuous series of scans in cloaked mode until a termination event occurs. Uses a superset of all scans as the inventory list. Creates new master inventory list.

[0093] Reveal Inventory

[0094] No scans. Returns most recent master inventory list.

[0095] One useful feature of the embodiments described herein is that the manner in which the controller 256 controls the antenna array 261 may be adjusted. The adjustment may be accomplished by modifying certain software parameters, including those noted in Tables 1 and 2 (such as integrity level, read time, run time, wait time, scan interval, etc.) as circumstances change (for example, changes in temperature, tag type, RF cavity, etc.). As explained in additional detail below, these changes can be performed remotely by sending the changed parameters to the controller 256 from the server cluster 112.

[0096] An overview of the operations performed by the inventory control software is set out in FIG. 14. At step 750, the controller 256 is reset via a hard reset by, for example, turning the key switch 615 to an arm position (not shown). At step 752, the controller checks the server cluster 112 to see if a new version of the controller software is available. If a new version is available, that version is downloaded and loaded into the memory 602 and a soft reset is performed, as shown at step 754. Once any necessary software updates have been performed, the controller 256 loads required parameters, reloads saved transactions, and reloads any master inventory information, if it exists, as shown at step 756. At step 758, the controller 256 checks its status. At step 760, the controller 256 determines whether a lockdown condition exists. If a lockdown condition exists, the controller sets a flag or similar device to indicate the presence of a lockdown condition (as shown at step 762) and continues to check for the presence of a lockdown condition (as shown by loop 764).

[0097] Once it is determined that a lockdown condition does not exist, the controller 256 performs a baseline run, queues (or places in a buffer) the inventory master value, and sets the lockdown flag to “off,” as shown at step 766. The controller 256 then executes a control idle loop (step 768) or, more broadly, a main processing loop. In the embodiment illustrated, the control idle loop includes five basic operations: a check diagnostic command operation (step 770), a poll user pass operation (step 772), a poll status operation (step 774), an update saved status operation (step 776), and a check alarm conditions operation (step 778). These steps are discussed in greater detail below. In summary, during these operations, the controller 256 determines whether the user has an authorized key and whether any alarm or other conditions are present. If any of the alarm or status conditions meet the requirements of a lockdown situation (as determined at step 780), the lockdown flag is set to “on” (step 782), information obtained about the inventory in and status of the MW 36 is sent to the server cluster 112 (step 784, background communication) and the control idle loop is executed again (as shown by loop 786).

[0098] If a lockdown condition does not exist, the controller 256 determines whether a user has accessed the MW (step 788) as determined, for example, by the controller 256 sensing an opening and closing of the door 236. If a user has accessed the MW, an inventory run is requested and the information from the run is queued in a transaction buffer, as shown in block 792. The information gathered from the inventory run is then sent to the server cluster 112 (as shown at step 784). The controller 256 continues to execute the software until reset.

[0099] FIGS. 15 through 21 provide additional information regarding the operations (or routines) discussed above with respect to FIG. 14.

[0100] As shown in FIG. 15, when the controller 256 executes the control idle loop, it determines whether any diagnostic commands need to be processed (step 793). If commands are unprocessed, the controller 256 processes those commands (step 794) and then returns to the control idle loop (step 768).

[0101] As shown in FIG. 16, after processing any diagnostic commands, the controller 256 checks the validity of any key or pass presented by a user. If the key is invalid, appropriate feedback is provided by, for example, lighting the red LED 628 (step 796). The controller then returns to the control idle loop. If the key is valid, the controller checks for the existence of a lockdown condition (step 798). If a lockdown condition exists, the controller denies access to the MW and returns to the control idle loop. If a lockdown condition does not exist, access is permitted and appropriate feedback provided by, for example, lighting the green LED 626 (step 799).

[0102] FIG. 17 illustrates the operations performed during a poll status operation (step 774). The controller 256 retrieves information from the various sensors (temperature, power, etc.) and returns to the control idle loop (step 768). As shown in FIG. 18, updating saved status information involves assigning the information retrieved during polling (step 774) to variables or registers holding prior status information.

[0103] As shown in FIG. 19, checking alarm conditions (step 778) involves comparing or otherwise evaluating the status information and other information, for example, shelf life, to predetermined thresholds (step 800). In the event any information exceeds or fails to meet the predetermined thresholds, as the case may be, an alarm transaction is queued (step 802). Then control is returned to the control idle loop (step 768).

[0104] FIG. 20 illustrates the functions performed by controller 256 when it executes RF inventory operations. As shown at steps 804-806, the controller 256 first determines whether the scanning operation to be performed is a baseline run or scan, an inventory run, or a background run. The type of run to be performed is passed from the control idle loop to the RF inventory module. Depending on the type of run requested, the appropriate parameters are loaded, as shown at steps 807-810. Once the parameters are loaded, an appropriate scan is performed, as shown at step 812. If the results of the scan are higher than a predetermined integrity level, a union set based on the results is formed as shown at steps 814 and 816. If the results do not meet the predetermined integrity level, additional scans are performed until the integrity level is met or exceeded, as shown by loop 818. If the type of run or scan performed was an inventory run (step 819), changes between the inventory run and previously stored information (in the example shown, the inventory master) are determined, as shown at step 820. Control is then returned to the control idle loop, as shown at step 822.

[0105] The number of scans to be used in any run is variable and is set to ensure a predetermined integrity, which, in the ideal case, is 100% integrity of recorded inventory. In one embodiment of the invention, a plurality of scans is performed such that the specified integrity level is achieved based on experimental data. A superset or union of all the scan sets is then formed. For example, in order to achieve an integrity level of 50%, the number of identical scans must be the majority set. In one embodiment, experiments have shown that the number of scans, in non-cloaked mode, should be about ten and in cloaked mode, about three. Additionally, an order (a product removal or purchase transaction), based on inventory recorded before door opening and after door closure, can be aged or buffered, that is, held for processing, either in the controller or at the server, for some time until further transactions are recorded. If the additional scans from these further transactions reveal a product recorded as taken in the previous transaction, the erroneous transaction can be corrected before billing a customer. While it is possible for the system to miss a tagged item during a scan, testing of embodiments of the invention has not resulted in a situation where a scan indicated the presence of items not physically present in the relevant MW. In any case, anomalies in recorded inventory that are picked up in later scans can be used to correct the billing information. In actual use, it is believed, and limited tests have shown, that this type of correction will be seldomly required. Further, the baseline run and the background run are not necessary in all applications, and can be selected to be used on any particular MW at the time of manufacture, field installation, or service interval.

[0106] The tags 272 may be equipped with the ability to report their temperature during a scan. A function of the temperature information obtained from the tags 272 can be used to adjust the scan and scan wait times (defined in Table 1 as Scan and ScanWait) to adjust for cloak time changes due to temperature in order to ensure inventory integrity during any run. All of the instances mentioned in the above paragraph refer to read time in cloaked mode.

[0107] Once the controller 256 has scanned the tagged products in the MW 36 or freezer 230, a message containing information regarding the scan is sent to the server cluster 112. As shown in FIG. 22, in the particular embodiment shown, the message takes the form of a background communication (step 784). The controller 256 checks, at step 850, whether a communication session or transaction between the controller 256 and the cluster 112 has already been started. If a transaction or communication has not been started, the controller 256 checks to see whether there is any information to send to the cluster 112, at step 852. If there is information to send, the controller 256 creates a connection to the server cluster 112, as shown at step 854.

[0108] If no transactions are being processed or queued, the controller 256 determines whether it should synchronize the real-time clock 402 with a standard time reference (step 855). For example, if a certain amount of time has passed since the last synchronization has occurred, the real time clock 402 is synchronized again to compensate for any variations that might have occurred since the last synchronization. If no synchronization is needed, the background communication module is exited and control is returned to the control idle loop. If synchronization is required, the clock is updated (as shown at steps 856 and 857).

[0109] If a transaction has been started or a transaction is queued, the controller 256 processes the next transaction or message to be communicated to the cluster 112 (as shown at step 860). Processing of the next transaction includes sending inventory, status, alarm, heartbeat, and passkey information to the server cluster 112. Once these transactions have been processed, the controller 256 processes input transactions for transmission to the server cluster 112 (step 862). Information such as updated passkey information, updated parameters, resets, lockdown information, software updates, status requests, and passkey lists are sent to the server cluster 112.

[0110] FIGS. 23 and 24 illustrate operations performed by the controller 256 upon the occurrence of key switch and interrupt events. As noted above, a transition of the key switch 615 from an arm position to a disarm position causes the controller to reboot or reset itself (as shown in steps 875 and 877 in FIG. 23). If a transition from the arm position to the disarm position occurs, the controller 256 initiates a shutdown sequence and saves information in the transaction queue (as shown at steps 879 and 881).

[0111] Various events cause the controller 256 to perform certain functions. For the embodiment described, the condition of a power failure causes a power fail transaction to be queued (steps 890 and 892 in FIG. 24). The need to input or output information on a serial port causes the controller to place the input information in an I/O buffer (steps 894 and 896). Operational status (or health or heartbeat) checks are carried out at predefined times. If the time for a status check has occurred, a status check is performed and the information obtained during the check is queued for transmission to the server cluster 112 (steps 900 and 902). If the door switch or sensor is toggled, the time of day and temperature of the MW 36 are recorded (steps 904 and 906). If the current sensor senses a toggling of the AC current, the toggle is recorded (steps 908 and 910). Finally, if the controller must provide user feedback (such as providing and indication of the validity of a passkey), the user feedback is provided and appropriate feedback flags are toggled (steps 912 and 914).

[0112] As can be seen from the above, the present invention provides an RF inventory and distribution system with features to diminish the effects of energy sharing, nulls, shadowing, and other effects that degrade integrity in recording inventory changes.

[0113] Various features and advantages of the invention are set forth in the following claims.