Previous Topic: Storing Accounts in MemoryNext Topic: API Details

CA ArcotID OTP Java Library Developer's Guide › Understanding ArcotID OTP APIs › Generating Passcodes

Generating Passcodes

To perform ArcotID OTP authentication, users have to first generate a passcode on their device and then submit it at the authenticating website to access the protected source. To generate the passcode, use the generateOTP() method in the API class.

ArcotID OTP SDK supports major industry-standard One-Time Password (OTP) generation algorithms. Based on the algorithm that you are using, you must prepare the input data and hash this data. The following table lists the fields that hold the input data required for generating passcodes.

Note: MasterCard Chip Authentication Program (CAP) and VISA Dynamic Passcode Authentication (DPA) algorithms support different modes for generating passcodes. Refer to the vendor documentation for more information on these modes.

Field

Description

CAP and DPA Password Fields

P_MODE

Specifies that modes are being used for generating passcodes. The possible values for this parameter are:

  • M_1
  • M_2
  • M_2_TDS
  • M_3

M_1

Specifies that Mode 1 is being used for generating passcodes. If you are using this mode, then you have to collect the following information:

  • P_AA
  • P_TRCC
  • P_UN

M_2

Specifies that Mode 2 is being used for generating passcodes. This mode does not require any other additional information.

M_2_TDS

Specifies that Mode 2 with TDS is being used for generating passcodes. This mode supports10 entries for passing any additional information.

M_3

Specifies that Mode 3 is being used for generating passcodes. If you are using this mode, then you have to collect P_UN.

P_AA

Specifies the amount that is used in the transaction.

P_TRCC

Specifies the type of currency that is used in the transaction.

P_UN

Specifies the challenge that is used in the transaction.

P_DATA

This field is used to pass additional information that is required by M_2_TDS mode.

Time-Based OTP Password Fields

P_TIME

Specifies the time for which the OTP is valid.

Note: This value needs to be provided only if an OTP is being generated for a time other than the current time.