Defining Strong Privacy for RFID