A data management system comprises a data store for storing at least one entry. The entry includes (i) information associated with an item, and (ii) information about a security feature associated with that item. The system also includes an authenticator operable to access the data store in response to a request from a remote reader. The authenticator includes (i) a reader validator to authenticate the remote reader, and (ii) a security feature validator to authenticate a security feature read by the remote reader. The authenticator is also operable to issue an authenticity confirmation in the event that a security feature is successfully validated. The system includes a port for coupling the remote reader and the authenticator to enable requests to be transmitted from the reader to the authenticator and responses to be transmitted from the authenticator to the remote reader.