Payment security in mobile environment

Summary form only given. M-Payments mean that the mobile phone becoming a personal trust device (PTD), and mobile devices equipped with wireless connectivity, can be used as a payment instrument in the physical world. A payment capability is embedded in the phone, which supports both physical face-to-face transactions, extending the e-purse proposition to the mobile phone, and remote transactions, with care of ease of use and overall convenience. The main issue, more than in the case for e-Payments, is strict security requirement, which include customer transaction authentication, confidentiality, integrity, nonrepudiation in an environment composed of heterogeneous wireless networks, such as PAN, LAN, WAN, with different security weaknesses. We provide a technology overview of the state of the art of mobile payments.