ROTIV: RFID Ownership Transfer With Issuer Verification
RFID tags travel between partner sites in a supply chain. For privacy reasons, each partner "Owns" the tags present at his site, i.e., the owner is the only entity able to authenticate his tags. However, when passing tags on to the next partner in the supply chain, ownership of the old partner is "Transferred" to the new partner. In this paper, the authors propose ROTIV, a protocol that allows for secure ownership transfer against some malicious owners. Furthermore, ROTIV offers issuer verification to prevent malicious partners from injecting fake tags not originally issued by some trusted party.