International Telecommunication Union Geneva, 9(pm)-10 February 2009 Secure Mobile Banking as Telecommunication Operator Service Igor Milashevskiy Chairman of the Board Intervale, Russia ITU-T Workshop on “New challenges for Telecommunication Security Standardizations" Geneva, 9(pm)-10 February 2009

International Telecommunication Union Geneva, 9(pm)-10 February Mobile commerce Remote payments Internet (Brows) Adopted for mobile terminal Security Payment account Payments from Bank account Payments from Mobile Operator account

International Telecommunication Union Geneva, 9(pm)-10 February Purpose To provide mobile subscriber with flexible and secure feature, allowing to have remote access to his bank account and to make payments for any goods or services, when the mobile terminal serves as a payment or banking terminal and the wireless network is used as a transport system to carry transaction flow.

International Telecommunication Union Geneva, 9(pm)-10 February Convenient service At any time and any place While traveling Simple and structured interface Ability to personalize the menu High speed transactions in real time Few payment tools in one handset

International Telecommunication Union Geneva, 9(pm)-10 February Security Confidentiality (encoded messages between Bank and Client) Integrity of data Impossibility of refusal and attributing of authorship of transaction Authentication (establishment of authority of the payer) Knows something Owns something

International Telecommunication Union Geneva, 9(pm)-10 February Tools Payments infrastructure Applet – Java application on SIM- card (STK application) Midlet –Java application on handset Any mobile-based transport (SMS;USSD; GPRS/EDGE/UMTS)

International Telecommunication Union Geneva, 9(pm)-10 February Intervale Established in 1999 (Moscow) Mobile Bank system The only live solution in CIS implementing VBV remote payments CIS leader in technology and live implementations Remote payment projects (ATMs, POSs, Internet, cash-points) Utilizes flexibility of Mobile Bank platform for supplementary revenue

International Telecommunication Union Geneva, 9(pm)-10 February Architecture of secure decision Issuer DomainAcquire DomainInteroperability Domain

International Telecommunication Union Geneva, 9(pm)-10 February Components Issuer Mobile Access Point (iMAP) Supports the interface with MSP Carries out authentication of the client by means of dynamic passwords through a mobile phone Acquirer Mobile Access Point (aMAP) Supports the interface with MSP Gives the interface for interaction with shop (Merchant)

International Telecommunication Union Geneva, 9(pm)-10 February Components (cont.) Mobile Service Provider (MSP) Provides interaction between the application on a SIM-card of the client and the Emittent. Carries out routing of inquiries to the corresponding Bank- Emittent Merchant Recipient of payment

International Telecommunication Union Geneva, 9(pm)-10 February BANK A 1 PAYMENTS 2 INFO on demand 3 Orders 4 Services 5 Refresh Exit Ok Triple click payment Remote personalization Add/Remove cards or recipients of payment at any time Balance status always available Payment from any registered card Applet PAYMENTS 1 TOP-UP 2 Bills 3 Digital TV 4 Refresh Exit Ok TOP-UP 1 Visa ON 2 VE ON 3 ECMC ON 4 Maestro ON 5 Refresh Exit Ok

International Telecommunication Union Geneva, 9(pm)-10 February Features of realisation Existing payment infrastructure is used Provides possibility of initiation of financial transaction, both by the client, and the seller (shop) Corresponds to requirements of the international payment systems to carrying out of remote financial transactions

International Telecommunication Union Geneva, 9(pm)-10 February Thank You !