Financial payment via mobile phones, mobile payment, is one of the newest technologies in ICT domain which have been received many attentions by researchers in recent years. In this technology there is no need to use additional equipments such as pos devices. This system can be used in any application increasing human life level, including healthcare. However, mobile payment as a subset of electronic payments has encountered many challenges regarding security because of public dispersion of mobile phone which increase the possibility of eavesdropping and abusing. Although this problem can be removed by using encryption protocols, however, restrictions in hardware resources of mobile phone such as low transition rate and low bandwidth of communication channel, limited calculation capacities of processor, battery and memory, prevent from direct usage of available encryption protocols in this environment. In this paper a new security algorithm for mobile phones based on call back technique and one time password is developed. This algorithm provides the required security for mobile payment regarding above resource restrictions. The simulation results on prototype data indicate the efficiency of the proposed algorithm.

No abstract