Previous Topic: API DetailsNext Topic: API Details


Generating Passcodes

To perform ArcotID OTP authentication, users have to generate a passcode on their device and then submit it at the authenticating website to access the protected source. To generate the passcode, use the generateOTP() method in the API class.

ArcotID OTP SDK supports major industry-standard One-Time Password (OTP) generation algorithms. Based on the algorithm that you are using, you must prepare the input data. The following table lists the fields that hold the input data required for generating passcodes.

Note: MasterCard Chip Authentication Program (CAP) and VISA Dynamic Passcode Authentication (DPA) algorithms support different modes for generating passcodes. Refer to the vendor documentation for more information on these modes.

Field

Description

CAP and DPA Password Fields

P_MODE

Specifies that modes are being used for generating passcodes. The possible values for this parameter are:

  • M_1
  • M_2
  • M_2_TDS
  • M_3

M_1

Specifies that Mode 1 is being used for generating passcodes. If you are using this mode, then you have to collect the following information:

  • P_AA
  • P_TRCC
  • P_UN

M_2

Specifies that Mode 2 is being used for generating passcodes. This mode does not require any other additional information.

M_2_TDS

Specifies that Mode 2 with TDS is being used for generating passcodes. This mode supports10 entries for passing any additional information.

M_3

Specifies that Mode 3 is being used for generating passcodes. If you are using this mode, then you have to collect P_UN.

P_AA

Specifies the amount that is used in the transaction.

P_TRCC

Specifies the type of currency that is used in the transaction.

P_UN

Specifies the challenge data for the OCRA Transaction Signing feature.

P_DATA

This field is used to pass additional information that is required by M_2_TDS mode.

Time-Based OTP Password Fields

A_TIMELEFT

This is an output parameter. It specifies the time in seconds for which the TOTP is valid.