Security framework for mobile banking

ABSTRACT

The banking sector is always looking for new services delivery platforms to improve customer confidence and satisfaction. To achieve this, the banking service delivery platform must provide end-to-end security to safeguard the information exchange between the bank and the customer. With the increased penetration of mobile phones in the market place the banks are looking for mobile phones as the major revenue generating platform for the delivery of banking and financial services. Today a number of banks offer mobile banking service to their customers. However, still banks have been adopting the generic user authentication systems that was developed for the desktop environment or other complex authentication systems with a number of user intrusive activities. Therefore, the usability and adoption of the mobile banking technology has been extremely slow. This paper presents a novel authentication and authorization framework for secure mobile banking applications. The proposed protocol enables users to authenticate with the banking services with minimum user interactions but with novel advance security features.

References

1. Howard Wilcox (2009), Mobile Banking Strategies, Applications & Markets 2008--2013, Juniper Research Limited, January 2009
2. Mobile Banking Overview (2009), Mobile Banking Association, version 1.0, December 2009.
3. Interworking of Liberty Alliance ID-FF, ID-WSF and Generic Authentication Architecture, Technical Report, 3GPP 3rd Generation Partnership Project, 3GPP TR 33.980; Technical Specification Group Services and System Aspect, Release 4, version 1.0.0., July 2007.
4. I. M. Kalden, R. and M. Meyer (2000), Wireless internet access based on GPRS, IEEE Personal Communications, vol. 7, no. 2, pp. 8--18.
5. CREMERS, C. (2008). The Scyther Tool: Verification, falsification, and analysis of security protocols. In Proc. of the 20th Int. Conf. Computer Aided Verification (CAV'08). Lecture Notes in Computer Science, vol. 5123. Springer Verlag, 414--418.
6. Mobile Money for the Unbanked, Annual Report 2009, GSM Association
7. A. K. Lenstra and E. K. Verheul (2001). Selecting cryptographic key sizes. Journal of Cryptology, 14(4):255--29

Index Terms

• Applied computing

  • Computers in other domains

    • Personal computers and PC applications

  • Electronic commerce

• Information systems

  • Information systems applications

    • Multimedia information systems

• Security and privacy

• Social and professional topics

  • Computing / technology policy

    • Computer crime