Several security threats in RFID systems are obstacles to intermingle this technology into human lives. On the other hand ensuring flexible privacy mechanism has been a challenge due to extremely inadequate computational storage of typical RFID tags. So in order to relieve tags from responsibility, privacy protection and security assurance was guaranteed by central server. In this paper, we describe serverless, lightweight, forward secured and untraceable authentication protocol for RFID tags. This authentication protocol ensures security against almost all major attacks without the intervention of server. Furthermore it is very critical to guarantee untraceability and scalability simultaneously. Here we are proposing a scheme to make our protocols more scalable via ownership transfer. To the best of our knowledge this is incorporated in the serverless system for the first time.