A method of committing a transaction with a mobile device within an ultra wideband, UWB, network comprising a plurality of anchors (110, 111, 112, 113, 114, 115, 116, 117, 118, 119), the UWB network covering a predetermined area having at least one trigger area, the method comprising waking up the mobile device upon entering the predetermined area, receiving initial network data at the mobile device, verifying that the UWB network is genuine based on the initial network data, after successfully verifying that the UWB network is genuine, initiating communication between the mobile device and an anchor within the UWB network, including partial mutual authentication, and then generating a session key for secure communication between the mobile device and the UWB network, tracking the location of the mobile device within the predetermined area based on secure communication between the mobile device and one or more anchors within the UWB network using the session key, and committing the transaction, if the location of the mobile device is within the at least one trigger area, wherein generating a session key comprises generating an ephemeral device key at the mobile device while utilizing a static device key and its certificate for authentication, the ephemeral device key comprising an ephemeral device private key and an ephemeral device public key, generating an ephemeral anchor key at the anchor while utilizing a static anchor key and its certificate for authentication, the ephemeral anchor key comprising an ephemeral anchor private key and an ephemeral anchor public key, sharing the ephemeral device public key with the anchor, sharing the ephemeral anchor public key and the static anchor key with the mobile device, generating the session key at the mobile device based on the ephemeral anchor public key and the static device key, and generating the session key at the anchor based on the ephemeral device public key and the static anchor key. waking up the mobile device upon entering the predetermined area, receiving initial network data at the mobile device, verifying that the UWB network is genuine based on the initial network data, after successfully verifying that the UWB network is genuine, initiating communication between the mobile device and an anchor within the UWB network, including partial mutual authentication, and then generating a session key for secure communication between the mobile device and the UWB network, tracking the location of the mobile device within the predetermined area based on secure communication between the mobile device and one or more anchors within the UWB network using the session key, and committing the transaction, if the location of the mobile device is within the at least one trigger area, wherein generating a session key comprises generating an ephemeral device key at the mobile device while utilizing a static device key and its certificate for authentication, the ephemeral device key comprising an ephemeral device private key and an ephemeral device public key, generating an ephemeral anchor key at the anchor while utilizing a static anchor key and its certificate for authentication, the ephemeral anchor key comprising an ephemeral anchor private key and an ephemeral anchor public key, sharing the ephemeral device public key with the anchor, sharing the ephemeral anchor public key and the static anchor key with the mobile device, generating the session key at the mobile device based on the ephemeral anchor public key and the static device key, and generating the session key at the anchor based on the ephemeral device public key and the static anchor key.