  IoT deployments grow in numbers and size and questions of long time support
and maintainability become increasingly important. To prevent vendor lock-in,
standard compliant capabilities to transfer control of IoT devices between
service providers must be offered. We propose a lightweight protocol for
transfer of control, and we show that the overhead for the involved IoT devices
is small and the overall required manual overhead is minimal. We analyse the
fulfilment of the security requirements to verify that the stipulated
requirements are satisfied.
