Method for attesting a mobile terminal for implementing a payment application on the mobile terminal

A method for attesting a mobile terminal for implementing a payment application on the mobile terminal, the mobile terminal being configured to communicate with a server, the method being implemented by the server and comprising:

• transmission to the mobile terminal of an attestation request, the attestation request being randomly selected by the server from a predetermined subset of a plurality of attestation requests, the attestation request defining a list of characteristics of the mobile terminal;
• reception of a list of values, a value of the list of values corresponding to a characteristic of the list of characteristics of the mobile terminal transmitted by the server;
• determination of, on the basis of the list of values, a security level of the mobile terminal;
• and
• establishment of a trusted communication channel based on the security level of the mobile terminal.

A mobile terminal comprising:

• at least one processor;
• and
• at least one memory storing a set of instructions the set of instructions being configured to implement a method for attesting a mobile terminal for implementing a payment application on the mobile terminal, when the instructions are executed on the at least one processor of the mobile terminal-(TM), the mobile terminal being configured to communicate with a server, the method comprising:
• receiving an attestation request from the server, the attestation request being randomly selected by the server from a predetermined subset of a plurality of attestation requests, the attestation request defining a list of characteristics of the mobile terminal;
• collecting a list of values for the mobile terminal, a value of the list of values corresponding to a characteristic of the list of characteristics of the mobile terminal transmitted by the server;
• transmitting the list of values to the server;
• and
• establishing a trusted communication channel with the server, the trusted communication channel being based on the list of values and a security level of the mobile terminal determined by the server on the basis of the list of values.