Development and Implementation of secure GSM algorithm for Mobile Banking

Table of Contents

Chapter 1: Overview of mobile banking security

Introduction

Chapter 2: GSM security issues

Literature review

2.1 GSM network architecture and GSM security

2.2 Mobile Banking and security

2.3 SMS/GPRS banking services

2.4 End to End security architecture for mobile banking system

Chapter 3: The focus of study

3.1 Theoretical section

3.1.1 GSM and GPRS security architecture

3.1.2 Security mechanism in GSM network

3.1.2.1 GSM authentication centre

3.1.2.2 Authentication procedure

3.1.3 Issus with GSM network system

3.1.3.1 Problems with A3/A8 authentication algorithm

3.1.3.2 A5 algorithm problems

3.1.3.3 Attack on RAND value

3.1.4 Current mobile banking

3.1.4.1 Current SMS banking services in Oman

3.1.4.2 Wireless Application WAP

3.1.4.3 Issus in mobile banking in Oman

3.1.4.4 Security problems with GPRS using WAP Implementations

3.1.4.5 Security problems connected with using the GPRS network

3.1.5 Secure SMS solution

3.1.5.1 Secure SMS protocol

3.1.5.2 Message structure

3.1.5.3 Protocol sequences

3.1.6 Generation and sending secure SMS messages

3.1.6.1 Security of secure SMS protocol

3.1.7 Secure GPRS solution

3.1.7.1 Protocol message components

3.1.7.2 Client protocol Initialization

3.1.7.3 SGP handshake for Client

3.1.7.4 Server protocol initialization

3.1.7.5 SGP handshake for server

3.1.7.6 Keys and certificates storage in the bank server

3.1.7.7 Secure GPRS protocol

Chapter 4: Simulation Results

4. Results of the project

Chapter 5

5. Conclusion & Future work

Objectives and Research Focus

The primary objective of this project is to investigate and improve the security of mobile banking services operating over GSM and GPRS networks. The work aims to identify inherent security flaws in current mobile network architectures and develop more robust, secure protocols for mobile transactions through simulation and analysis.

• Analysis of security vulnerabilities in mobile network architectures.
• Evaluation of current SMS and GPRS banking security protocols.
• Development of a secure SMS protocol incorporating improved message structures and authentication sequences.
• Design of a new secure GPRS protocol using advanced encryption and handshaking mechanisms.
• Performance validation via MATLAB simulation of signal transmission using OFDM techniques.

Excerpt from the Book

Summary of Chapters

Chapter 1: Overview of mobile banking security: Provides an introduction to the rapid growth of GSM technology and the fundamental security challenges associated with mobile banking in modern telecommunications.

Chapter 2: GSM security issues: Reviews existing literature regarding GSM network architecture, security vulnerabilities, and current mobile banking payment models.

Chapter 3: The focus of study: Details the theoretical foundation for proposed security solutions, including the design of secure SMS and GPRS protocols to mitigate identified threats.

Chapter 4: Simulation Results: Presents a comparative analysis between existing mobile banking solutions and the proposed secure architectures, backed by simulation data.

Chapter 5: Conclusion & Future work: Summarizes the findings of the security investigations and suggests future research directions, including the use of more complex programming environments.

Keywords

GSM, GPRS, Mobile Banking, Security, Encryption, Authentication, SMS, OFDM, MATLAB, WAP, Protocols, Integrity, Confidentiality, Non-repudiation, Network Architecture

Frequently Asked Questions

What is the core focus of this research?

This research focuses on identifying and addressing security vulnerabilities in mobile banking systems that operate over inherently insecure GSM and GPRS networks.

Which specific areas of mobile banking are examined?

The study covers the security architecture of mobile networks, the vulnerabilities in current SMS and GPRS banking implementations, and the design of robust protocols to secure these transactions.

What is the primary goal of the proposed security solutions?

The primary goal is to ensure end-to-end security for mobile banking transactions, specifically addressing issues like data integrity, authentication, and protection against unauthorized eavesdropping.

Which scientific method is utilized in this project?

The project employs both a theoretical analysis of existing security standards and a practical simulation approach using MATLAB to model signal transmission and evaluate security improvements.

What key topics are covered in the main body of the work?

The main body treats the evaluation of existing GSM security, the development of a secure SMS protocol, the design of a secure GPRS solution, and the simulation of signal performance using Orthogonal Frequency Division Multiplexing (OFDM).

What keywords best represent this work?

The work is characterized by terms such as GSM, GPRS, Mobile Banking, Encryption, Authentication, SMS, and OFDM.

How is the security of the SMS protocol improved?

The improved SMS protocol uses a symmetric secret one-time password and message digests to ensure that even if a message is intercepted, it cannot be tampered with or used by unauthorized parties.

How does the proposed SGP handshake contribute to security?

The SGP (Service General Packet) handshake ensures that both the client and the bank server are authenticated, using digital signatures and encrypted keys to protect account information.

What role does MATLAB play in this study?

MATLAB is used to simulate signal transmission and test the performance of the communication channel with and without noise, thereby validating the robustness of the proposed signal processing techniques.