A privacy-preserving authentication protocol for smart tags