In recent years, radio frequency identification technology has developed rapidly and has been applied in supply chains. Products in supply chains are varied and may belong to several different owners. Ownership transfer requires the consent of a majority of owners. This article proposed a method suitable for simultaneously transferring the ownership of a large number of goods. The method does not require a trusted third party and can securely and efficiently transfer group ownership for multiple owners with multiple tags. The old and new owner groups can be classified as different authorities. This method can be used in mobile readers to transfer one, some, or all tags in a group. It includes mutual authentication between tags, readers, and backend servers, and can ensure that only assigned owners can obtain the tag ownership. The method proved can resist most known attacks, such as secret disclosure attacks and replay attacks. It can also prevent attacks from the dishonest original owners. Finally, through experiments, we compared the proposed method with other many-to-many ownership transfer methods and demonstrated that the proposed method has better security and fewer transmitted messages than other methods.
Read full abstract