One Time Password (OTP) applet

One-time password (OTP) has become more common in authentication and service access control in new systems. In this sense, a specific application for generating OTP with a card has been designed and implemented by Sepid System Company. This applet can generate two types of standard OTP:
- TOTP (Time-Based OTP) according to RFC 6238
- HOTP (HMAC-Based OTP) according to RFC 4226
By using this applet, the user can use his card to generate OTP and, for example, access services that require authentication with a one-time password.

Slide 1 - copy - copy
Slide 1 - copy - copy
previous arrow
next arrow

One-time password (OTP) has become more common in authentication and service access control in new systems. In this sense, Sepid System Company has designed and implemented a specific application for generating OTP with a card. This applet can generate two types of standard OTP:

  • TOTP (Time-Based OTP) according to RFC 6238
  • HOTP (HMAC-Based OTP) according to RFC 4226

Thus, by using this applet, the user can use his card to generate OTP and, for example, access services that require authentication with a one-time password. The length of OTP, the client password and the confidential information needed for access control (username and password), and the interval of updating the OTP (in the TOTP method) are all flexible and configurable. In addition, the possibility of access control based on matching biometrics on the card (MOC) has also been implemented and can be applied.

Technical specifications of the OTP applet

  • Technology: Java applet
  • Platform:
    • JCDK 2.1.2 and higher
    • Global Platform 2.1.1 and higher
  • Memory size required for loading and installation: 4 KB
  • The amount of memory required to load data: at least less than one kilobyte.
  • Minimum (important/higher) card requirements:
    • Support for 3-DES encryption algorithm
TOP