In this contribution, we firstly design and realize a PKI-SIM card that is a regular SIM card with additional PKI-functionality and present a security mobile access scheme based on the PKI-SIM card, which offers solutions for the development of secure mobile business applications using SMS. Then, we proposed a novel authentication and session key distribution protocol which provides end-to-end confidentiality and integrity of the SMS message. Finally, a formal verification of the protocol using BAN logic is presented and the security and performance analysis of our scheme revealed that it is suitable for practical needs both in speed and security
