TP-OTP: Two-Party, Ownership Transfer Protocol for RFID Tags Based on Quadratic Residues

Items with Radio Frequency Identification (RFID) tags can be sold from an old owner to a new owner. An Ownership Transfer (OT) protocol allows the transfer of tag ownership from one owner to another. In this work we present a secure, two-party ownership transfer protocol (TP-OTP) for an RFID tag. TP-OTP uses the quadratic residue property to privately convey secrets between the tag and each owner. Our scheme is EPC compliant and uses lightweight mechanisms that passive tags can accommodate. Further, old and new owners need not to be in range of the tag at the same time. Comparisons on security, privacy, and efficiency with other two-party OT protocols demonstrate the merits of TP-OTP.