Modelling, Design, and Analysis of Secure Mobile Payment Systems

Mobile payment allows users to perform payment transactions through their mobile devices. However, it brings up many emerging issues regarding security and performance of mobile payment systems that can be classified into at least two main problems. The first problem comes from the limitations of wireless environments that are primarily from mobile devices which have limited system resources and from wireless networks which have high connection cost, low bandwidth, and low reliability. In particular, a mobile user may not be able to efficiently performing highly secure transactions, which require high computational cryptographic operations, over the wireless network with the above characteristics. The second problem is the lack of sufficient security of existing mobile payment systems, mainly due to improper protocol design and the deployment of lightweight cryptographic operations which lead to the lack of important transaction security properties. Such problems have motivated the research conducted in this thesis. The purpose of this thesis is to propose methods to enable practical and secure mobile payment. The results obtained from this thesis may serve as a basis for protocol designers and system implementers to design and implement secure mobile payment systems and to analyze their existing mobile payment systems. The research conducted in this thesis focuses on three different levels of reasoning and securing mobile payment: formal model, framework, and protocol. We first propose a formal model for a practical and secure mobile payment