One-time password generation

Response-Only OTPs

The workflow involves the following steps:

1. The application integrating the SDK retrieves the Digipass static and dynamic vectors from its data storage.

2. The application calls the SDK's OTP generation function with the Digipass vectors.

3. The SDK returns an OTP and, optionally, a return host code (RHC) or an error code. The dynamic vector is updated.

4. The application updates the dynamic vector in its data storage. To update the dynamic vector, the application can rely on the Secure Storage SDK.

   For more information, refer to the OneSpan Mobile Security Suite Product Guide, Secure Storage SDK.

5. The application processes the OTP, the RHC, or the error code.

   Routines of the password generation service in Response-Only mode:

   • C/C++/Objective C: DPSDK_GenerateResponseOnly
   • Swift: generateResponseOnly
   • Java: generateResponseOnly

Challenge/Response OTPs

The workflow involves the following steps:

1. The user receives a challenge from the server.

2. The user enters it in the application integrating the SDK.

3. The application integrating the SDK retrieves the Digipass static and dynamic vectors from its data storage.

4. The application calls the SDK's OTP generation function with the Digipass vectors and the server challenge.

5. The SDK returns an OTP or an error code. The dynamic vectotr is updated.

6. The application updates the dynamic vector in its data storage. To update the dynamic vector, the application can rely on the Secure Storage SDK.

   For more information, refer to the OneSpan Mobile Security Suite Product Guide, Secure Storage SDK.

7. The application processes the OTP or the error code.

   Routines of the password generation service in Challenge/Response mode:

   • C/C++/Objective C: DPSDK_GenerateResponseFromChallenge
   • Swift: generateResponseFromChallenge
   • Java: generateResponseFromChallenge