Abstract
Due to the advancement of modern technology, the era of Internet of Things (IoT) has come with cloud computing going on thriving, which has brought more and more attention to Radio Frequency Identification (RFID), as RFID is key to the sensor technology in IoT. In 2016, Cao et al. proposed an ingenious RFID ownership transfer protocol based on cloud. However, we shall point out that the proposed scheme is vulnerable to some security weaknesses such as the desynchronization attack as well as the tag impersonation attack and a tendency towards plaintext miscalculations. In the future, anyone can propose an improved scheme to remedy these security weaknesses.