Payment protocols; Details thereof {using mutual authentication without cards, e.g. challenge-response}