We assume that the communication is secure between various subsystems of the MNO.
The shop POS terminal, registered with one or more MNO, shares an MNO specific secret key with the corresponding MNO.
This key is issued once a shop is registered with the MNO.