Development and Implementation of secure GSM algorithm for Mobile Banking

Telecommunication Security

Masterarbeit , 2011 , 57 Seiten , Note: MERIT

Informatik - IT-Security

GSM systems are vulnerable to an unauthorized access and eaves droppings when compared with the traditional fixed wired networks due to the mobility of its users. The main idea of this project is to develop an application device to secure mobile banking over unsecure GSM network. It is important to mention here that, mobile banking is a term used for performing balance checks, account transactions, payments, credit applications and many other online applications. But unfortunately, the security architecture for cellular network is not entirely secure. As a matter of fact, GSM network infrastructure is proved to be insecure and many possible attacks have well documented in the literature. Security was never considered in the initial stages therefore sending protective banking information across an open mobile phone network remains insecure. Consequently, this project focuses entirely on the developing and designing security techniques to asses some security issues within mobile banking through cellular phone network (GSM). The main aim of this project was to investigate and examine the following:
1. Security issues in each level of the mobile network architecture.
2. Messages and signals exchanged between user’s cellular phone and mobile network at each level.
3. The overall security architecture of GSM flaws.
4. Some existing security measures for mobile transactions.
5. The current security within SMS banking and GPRS banking.
Finally, two folded simulation in MATLABT were performed using OFDM which is a broadband multicarrier modulation method that provides a high performance operation to transmitted and received data or information. In other words, it is the most customary single that uses carrier modulation that gives high speed function in microwave frequency. Therefore, the first program was concerned with generating transmission and receiving the OFDM signal without channel noise effect. The second program was concerned with the effects of high power amplifier and channel noise on the OFDM signals. It is to be noticed here that the OFDM is a modulation that is especially suitable for wireless communication. Consequently, the suggested programme succeeded in achieving a limited noise or interference in the signal as the users complained and suffered constantly from this noise and from losing the data or the information.

Inhaltsverzeichnis (Table of Contents)

• Abstract
• List of Figures
• List of Tables
• Abbreviations
• Acknowledgment
• Chapter 1: Overview of mobile banking security
  • Introduction
• Chapter 2: GSM security issues
  • Literature review
  • 2.1 GSM network architecture and GSM security
  • 2.2 Mobile Banking and security
  • 2.3 SMS/GPRS banking services
  • 2.4 End to End security architecture for mobile banking system
• Chapter 3: The focus of study
  • 3.1 Theoretical section
    • 3.1.1 GSM and GPRS security architecture
    • 3.1.2 Security mechanisms in GSM network
      • 3.1.2.1 GSM Authentication Centre
      • 3.1.2.2 Authentication Procedure
    • 3.1.3 Issus with GSM Network System
      • 3.1.3.1 Problems with A3/A8 authentication algorithm
      • 3.1.3.2 A5 algorithm Problems
      • 3.1.3.3 Attack on RAND value
    • 3.1.4 Current Mobile Banking
      • 3.1.4.1 Current SMS Banking Services in Oman
      • 3.1.4.2 Wireless Application Protocol WAP
      • 3.1.4.3 Issues in mobile banking in Oman
      • 3.1.4.4 Security problems with GPRS using WAP Implementations
      • 3.1.4.5 Security problems connected with using the GPRS network
    • 3.1.5 Secure SMS Solution
      • 3.1.5.1 Secure SMS Protocol
      • 3.1.5.2 Message Structure
      • 3.1.5.3 Protocol sequences
    • 3.1.6 Generation and sending secure SMS messages
      • 3.1.6.1 Security of secure SMS Protocol
    • 3.1.7 Secure GPRS Solution
      • 3.1.7.1 Protocol message components
      • 3.1.7.2 Client protocol Initialization
      • 3.1.7.3 SGP (Service General Packet) handshake for Client
      • 3.1.7.4 Server protocol initialization
      • 3.1.7.5 SGP handshake server
      • 3.1.7.6 Keys and certificates storage in the bank server
      • 3.1.7.7 Secure GPRS Protocol
  • Chapter 4: Simulation Results
    • 4. Results of the project
  • Chapter 5
    • 5. Conclusion & Future work
  • References
  • Appendix A:
    • Practical section
  • Appendix B:
    • Code of Programs

  Zielsetzung und Themenschwerpunkte (Objectives and Key Themes)

  This project aims to develop a secure application device to enhance the security of mobile banking over the GSM network. The project investigates the security flaws of the GSM and GPRS network architectures, examines existing security measures for mobile transactions, and proposes secure SMS and GPRS solutions to mitigate these vulnerabilities.
  • Security Issues in GSM Network Architecture
  • Secure Mobile Banking Solutions
  • SMS/GPRS Security Protocols
  • OFDM Signal Generation and Analysis
  • Comparison of Existing and Proposed Solutions

  Zusammenfassung der Kapitel (Chapter Summaries)

  • Chapter 1: Overview of mobile banking security: This chapter introduces the concept of mobile banking, highlights its growing popularity, and emphasizes the need for enhanced security measures in the face of vulnerabilities in GSM and GPRS networks.
  • Chapter 2: GSM security issues: This chapter provides a comprehensive review of GSM network architecture and security flaws. It discusses existing research on security techniques in GSM, including authentication, encryption, and potential vulnerabilities.
  • Chapter 3: The focus of study: This chapter delves into the theoretical section of the project, examining the security vulnerabilities of GSM and GPRS architectures in detail. It explores issues with existing authentication algorithms (A3/A8 and A5), analyzes current SMS and GPRS banking solutions, and outlines the security shortfalls of these implementations. The chapter then presents two proposed solutions: a secure SMS protocol and a secure GPRS protocol, detailing their message structures, protocol sequences, and security features.
  • Chapter 4: Simulation Results: This chapter compares existing mobile banking solutions with the proposed secure solutions. It presents a table outlining the advantages and disadvantages of each approach in terms of security, price, transmission speed, dependability of connection, compatibility, and user ability.
  • Chapter 5: Conclusions & Future work: This chapter concludes by summarizing the key findings of the project, emphasizing the importance of addressing security vulnerabilities in mobile banking and exploring avenues for future research.

  Schlüsselwörter (Keywords)

  This project focuses on mobile banking security, GSM and GPRS security architectures, secure SMS and GPRS protocols, authentication algorithms (A3/A8 and A5), OFDM signal generation and analysis, and comparison of existing and proposed solutions.

• Hochschule: ( Middlesex University in London )
• Veranstaltung: Telecommunication Engineering
• Note: MERIT
• Autor: Ali Raheem (Autor:in)
• Erscheinungsjahr: 2011
• Seiten: 57
• Katalognummer: V200701
• ISBN (eBook): 9783656322030
• ISBN (Buch): 9783656326144
• Sprache: Englisch
• Schlagworte: Mobile Banking Security, GSM, Security, MMS, Mobile Banking, OFDM, MATLAB, SMS, GPRS, Encryption, one time password, Shall key, RSA key