OTP Authentication

Display Card.

They use embedded electronic displays – E-ink or LCD screens integrated into the payment or identification card – to display information on the surface of the card… such as an account balance, loyalty points or even driving information. These cards can show one-time passwords (OTP), transaction information, account balances, and other real-time information, giving users more control over their usage and more transparency in their service. In the financial services world, display cards can also help increase security by producing dynamic authentication codes, which significantly reduce the chances of card fraud. They also offer instant transaction feedback and greater insight into account activity.

TOTP is a time-based series of one-time passwords. The token usually has a validity period of just 30 or 60 seconds, after which a new password is generated automatically. This mitigates risk of an attacker replaying a message, since the code will become invalid in a short period even if they intercept it.

On the other hand, HOTP tokens produce passwords using an incrementing counter and a secret key known only between the user’s token and the authentication server. Pressing a button increases this counter, creating a new unique code. Unlike TOTP, HOTP codes do not expire until they are used, so the server and user device need to remain in sync to avoid mismatches or potential security risk.