OTP and challenge/response algorithms for financial and e-government identity assurance: Current landscape and trends

Abstract

This paper will analyse the current landscape of One Time Password (OTP) and Challenge-Response algorithms. It will detail the technical and security differences between algorithms such as the OATH algorithms (HOTP, OCRA, HOTP time based), EMV CAP and the proprietary algorithms from Activldentity. The paper describes the most common use cases and applicability as important tools for identity assurance in the financial and c-government industry sectors. It also outlines observed trends in current usage and future trends providing the audience with the valuable information to make a more informed choice in their identity assurance challenges. © 2009 Vieweg+Teubner | GWV Fachverlage GmbH, Wiesbaden.