Dynamic Password Generators and Hardware OTP Devices
Handheld devices that generate one-time passwords from an EMV card and a PIN.
A dynamic password generator is a small hardware device, not software. The user inserts an EMV bank card and enters a PIN on the device’s keypad, and it produces a one-time password or authentication code. ACS makes the APG8201, APG8202 and APG8205 OTP generators; BSD Infotech can confirm availability for your project.
Talk to BSD Infotech
Tell us your authentication scheme, your cards and the quantity. We will confirm which OTP generator is available and suits your application.
What Is a Dynamic Password Generator?
Hardware OTP and Two-Factor Authentication
These devices use two factors: something the user has (the EMV card) and something the user knows (the PIN). The device checks both before it produces a code, and each code is meant for one use. The OTP is typically used as an extra check in online banking and other applications that support card-based authentication.
ACS OTP Generator Range
Price on request for all models. Contact BSD Infotech to confirm current availability.
APG8201 PINhandy 1
Generates one-time passwords, challenge-response codes and transaction data signatures. Works standalone and in PC-linked mode, with Secure PIN Entry in PC-linked mode for other smart card applications.
Price on request
APG8202 PINhandy 2
Standalone device that generates one-time passwords, challenge-response codes and transaction data signatures based on the EMV card’s security keys.
Price on request
APG8205
Portable, low-cost standalone device for one-time passwords, challenge-response codes and transaction data signing, based on the security keys stored in EMV cards.
Price on request
Specifications are from ACS product documentation.
Product Comparison
| Feature | APG8201 PINhandy 1 | APG8202 PINhandy 2 | APG8205 |
|---|---|---|---|
| One-time passwords | Yes | Yes | Yes |
| Challenge-response codes | Yes | Yes | Yes |
| Transaction data signing | Yes | Yes | Yes |
| EMV card + PIN on built-in keypad | Yes | Yes | Yes |
| Standalone mode | Yes | Yes | Yes |
| PC-linked mode | Yes (with Secure PIN Entry) | No (standalone only) | No (standalone) |
| Standards listed by ACS | ISO 7816, EMV Level 1, Mastercard CAP and PLA, Visa DPA | ISO 7816, EMV Level 1, Mastercard CAP and PLA, Visa DPA | Mastercard CAP, Visa DPA, EMV |
How Hardware OTP Authentication Works
Insert the card
The user inserts their EMV card into the device.
Enter the PIN
The user types the card PIN on the device’s built-in keypad.
Get the code
After the card and PIN are verified, the device displays a one-time password or other code.
Use it once
The user enters the code in the online application, which validates it with the issuer’s system.
EMV and Smart-Card-Based Authentication
The codes are generated using security keys stored on the user’s EMV card, so the card itself is part of the authentication. ACS lists support for bank card authentication schemes including Mastercard CAP (Chip Authentication Program) and Visa DPA (Dynamic Passcode Authentication). Which scheme applies depends on the card issuer.
Challenge-Response and Transaction Signing
One-time password
A code for a single login or transaction.
Challenge-response
The application shows a challenge number; the user enters it on the device, and the device returns a response code.
Transaction data signing
Transaction details are entered on the device to produce a code tied to that transaction (PKI digital signature, as ACS describes it).
PC-Linked vs Standalone Operation
All three devices work standalone: no computer is needed to generate a code. The APG8201 PINhandy 1 can also connect to a PC, where it acts as a PIN-pad smart card reader for other smart card applications, with Secure PIN Entry. For PIN-pad readers without OTP generation, see smart card readers with PIN pad.
Applications
These are the applications ACS designs these devices for, not BSD project references.
Software and Integration
Hardware OTP devices work with a back-end that can validate the codes, usually the card issuer’s authentication system. Before choosing a device, confirm which scheme your system supports. For PC-linked use of the APG8201 as a smart card reader, see our Smart Card Reader SDK and Integration page.
Planning a hardware OTP deployment?
Tell us your authentication scheme and volumes, and we will advise on a device.
How to Choose
Also need a PC card reader
The APG8201 PINhandy 1 works standalone and PC-linked.
Standalone only
The APG8202 PINhandy 2 and APG8205 are standalone devices; ACS describes the APG8205 as low-cost.
Your issuer’s scheme
Confirm that your system supports Mastercard CAP, Visa DPA or the scheme you use.
Frequently Asked Questions
Need Hardware OTP Devices?
Tell us your authentication scheme, your cards and the quantity. We will confirm which device is available and send current pricing.