TPOT: a Two-party Privacy-preserving Ownership Transfer Protocol for RFID Tags

When embedded in consumer goods, RFID (Radio-Frequency IDentification) tags often suffer from risking customer privacy, especially after the transactions being completed, which makes designing excellent RFID tag ownership transfer protocols more urgent than ever. We propose a hash-based method, TPOT, to transfer RFID tag ownership to customers. For tag owners' privacy protection, our scheme lets readers do ownership transfer instead of back-end servers. Our final result, 4H (four hash calculations) efficiency of ownership transfer on the reader side, outperforms most of previously reported solutions based on hash. TPOT is also suitable for large-scale RFID systems.