13.04.2013 Views

Digipass Plug-In for IAS Product Guide - Vasco

Digipass Plug-In for IAS Product Guide - Vasco

Digipass Plug-In for IAS Product Guide - Vasco

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

<strong>Digipass</strong> <strong>Plug</strong>-<strong>In</strong> <strong>for</strong> <strong>IAS</strong> <strong>Product</strong> <strong>Guide</strong> <strong>Digipass</strong><br />

Time-based<br />

A time-based Application will change the OTP to be displayed based on the current time. The<br />

common time step used is 36 seconds – and means that the OTP to be displayed will change<br />

every 36 seconds, whether or not an OTP has been requested from the <strong>Digipass</strong>.<br />

Event-based<br />

An event-based <strong>Digipass</strong> Application will display a new OTP each time a request <strong>for</strong> an OTP is<br />

made.<br />

Challenge/Response<br />

Challenge/Response <strong>Digipass</strong> Applications can be either time-based or non-time-based:<br />

Time-based<br />

A time-based Challenge/Response <strong>Digipass</strong> Application will generate an OTP based on the<br />

Challenge given and the current time. The common time step used is 9 hours ('slow<br />

challenge'). This would mean that if the exact same Challenge were given to a <strong>Digipass</strong> within<br />

a 9 hour period, the <strong>Digipass</strong> Application will generate the same OTP. However, Challenges<br />

are very rarely repeated within such a time period.<br />

Non-time-based<br />

A non-time-based Challenge/Response <strong>Digipass</strong> Application will generate an OTP based only on<br />

the Challenge given.<br />

2.2.3.3 OTP Length<br />

The length of the OTP (excluding check digit) generated by the <strong>Digipass</strong> <strong>for</strong> Response Only<br />

and Challenge/Response <strong>Digipass</strong> Applications.<br />

Check Digit<br />

A check digit may be added to each OTP. This is generated from the response and allows <strong>for</strong><br />

faster invalidation of incorrect OTPs.<br />

2.2.3.4 Challenge Length<br />

The length of the Challenge (excluding check digit) which should be expected by the <strong>Digipass</strong>.<br />

This is used by the Challenge/Response <strong>Digipass</strong> Application.<br />

Check Digit<br />

A check digit may be expected with each Challenge. This is generated by the server from the<br />

Challenge and allows the <strong>Digipass</strong> to reject most invalid Challenges.<br />

© 2005 VASCO Data Security <strong>In</strong>c. 26

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!