A secure and optimized mobile payment framework with formal verification

Abstract

In this paper we propose a Secure and Optimized M obile Payment Framework based on Universal Integrated Circuit Card (UICC) (a) which summarizes a mobile payment in relation to several different participants, (b) a procedure of personalizing UICC by the client c) a procedure of provisioning and personalization (M utual Authentication, Key Agreement Protocol & a procedure for ensuring non repudiation without adopting WPKI) of M obile Payments Application (which is on UICC) by the Bank d) a mobile payment protocol is proposed between the personalized M obile Payment Application on UICC and the Bank Server which ensures all the security properties. All the proposed protocols have been successfully verified using AVISPA and Scyther Tools.