Abstract
Current literature in the realm of mobile payments are not robust and secure. Intruders target three areas for vital information they are Mobile Payment Application (MPA), during the Transit of messages and Bank Server. This paper addresses these shortcoming and proposes a novel key management in the realm of secure mobile payments. Our proposed protocol ensures confidentiality, authentication and Integrity. Proposed protocol ensures security and freshness of the keys, overcomes reverse engineering, security of data at rest and during transit are ensured. Proposed protocol withstands replay attacks, impersonation attacks and Man-In-The-Middle attack.