Digipass Plug-In for IAS Product Guide - Vasco
Digipass Plug-In for IAS Product Guide - Vasco
Digipass Plug-In for IAS Product Guide - Vasco
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
<strong>Digipass</strong> <strong>Plug</strong>-<strong>In</strong> <strong>for</strong> <strong>IAS</strong> <strong>Product</strong> <strong>Guide</strong> <strong>Digipass</strong><br />
Time-based<br />
A time-based Application will change the OTP to be displayed based on the current time. The<br />
common time step used is 36 seconds – and means that the OTP to be displayed will change<br />
every 36 seconds, whether or not an OTP has been requested from the <strong>Digipass</strong>.<br />
Event-based<br />
An event-based <strong>Digipass</strong> Application will display a new OTP each time a request <strong>for</strong> an OTP is<br />
made.<br />
Challenge/Response<br />
Challenge/Response <strong>Digipass</strong> Applications can be either time-based or non-time-based:<br />
Time-based<br />
A time-based Challenge/Response <strong>Digipass</strong> Application will generate an OTP based on the<br />
Challenge given and the current time. The common time step used is 9 hours ('slow<br />
challenge'). This would mean that if the exact same Challenge were given to a <strong>Digipass</strong> within<br />
a 9 hour period, the <strong>Digipass</strong> Application will generate the same OTP. However, Challenges<br />
are very rarely repeated within such a time period.<br />
Non-time-based<br />
A non-time-based Challenge/Response <strong>Digipass</strong> Application will generate an OTP based only on<br />
the Challenge given.<br />
2.2.3.3 OTP Length<br />
The length of the OTP (excluding check digit) generated by the <strong>Digipass</strong> <strong>for</strong> Response Only<br />
and Challenge/Response <strong>Digipass</strong> Applications.<br />
Check Digit<br />
A check digit may be added to each OTP. This is generated from the response and allows <strong>for</strong><br />
faster invalidation of incorrect OTPs.<br />
2.2.3.4 Challenge Length<br />
The length of the Challenge (excluding check digit) which should be expected by the <strong>Digipass</strong>.<br />
This is used by the Challenge/Response <strong>Digipass</strong> Application.<br />
Check Digit<br />
A check digit may be expected with each Challenge. This is generated by the server from the<br />
Challenge and allows the <strong>Digipass</strong> to reject most invalid Challenges.<br />
© 2005 VASCO Data Security <strong>In</strong>c. 26