totp_EVVIS-QR1 USB可编程TOTP硬件令牌

totp

Today, we are presenting a new type of TOTP hardware tokens — USB Programmable token that displays the OTP value as a QR code and also can send the current OTP value over USB as a part of its HID emulation feature. 今天，我们展示了一种新型的TOTP硬件令牌-USB可编程令牌，该令牌将OTP值显示为QR码，并且还可以通过USB发送当前的OTP值作为其HID仿真功能的一部分。

什么是EVVIS-QR1？ (What is EVVIS-QR1?)

EVVIS-QR1 is a hardware device developed primarily for

EVVIS-QR1是主要为

电子访问验证(EVV) (Electronic visit verification (EVV))

information systems (hence the name). It is a standards-based TOTP hardware token that can also be

信息系统(因此得名)。 它是基于标准的TOTP硬件令牌，也可以是

programmed over USB. The OTP generated is shown on the display both as regular digits as well as a QR image. Both features (OTP shown as QR code and HID keyboard emulation) are intended to make it possible to minimize typos when entering the OTP. 通过USB编程 。 生成的OTP在显示屏上既显示为常规数字又显示为QR图像。 两种功能(OTP显示为QR码和HID键盘仿真)都旨在使输入OTP时的错别字最小化。

什么是EVV，为什么重要？ (What is EVV and why is it important?)

一触式OTP输入 (One-touch OTP Entry)

EVVIS-QR1 device can send the OTP over USB thanks to HID emulation function built-in (Windows only). This will allow minimizing the user actions needed to authenticate with any 2FA-enabled system. You can configure the device to send the OTP digits together with 'Enter' keystroke (ASCII char 13) — this adds the convenience of minimizing user actions needed for logging on to a system (i.e. a Web login form with the second-factor field), as the pressing the Enter key on the keyboard will be emulated, and the form requesting the OTP will be submitted automatically without the need of clicking the submit button.

借助内置的HID仿真功能，EVVIS-QR1设备可以通过USB发送OTP(仅限Windows)。 这样可以最大程度地减少使用任何启用2FA的系统进行身份验证所需的用户操作。 您可以将设备配置为与“ Enter”键(ASCII字符13)一起发送OTP数字-这增加了最小化登录系统所需的用户操作的便利(即带有第二因子字段的Web登录表单) ，因为将模拟在键盘上按Enter键，并且不需要单击提交按钮，将自动提交请求OTP的表单。

OTP显示为QR图像 (OTP shown as a QR image)

The devices showing the OTP as QR code have the most potential of greatly improving user experience when a special app is used. This is perfect for TOTP based electronic verification systems.

当使用特殊应用程序时，将OTP显示为QR码的设备最有可能极大地改善用户体验。 这对于基于TOTP的电子验证系统是完美的。

即使使用标准软件(例如，iOS下的移动Safari)，此功能也可能会稍微改善用户体验。 (This feature may slightly improve the user experience even with standard software (i.e. mobile Safari under iOS))

The speed of the process (yet to be evaluated and compared to manual input speed) can be further improved by leveraging the Shortcuts app functionality of modern iOS (v 12.0 and higher). A shortcut within this app is a quick way to get one or more tasks done with your apps. By creating a set of tasks using the Shortcuts app we can minimize the number of actions required to be done by the user to copy the OTP from the EVVIS device.

通过利用现代iOS(v 12.0和更高版本)的“快捷方式”应用程序功能，可以进一步提高处理速度(尚待评估并与手动输入速度进行比较)。 此应用程序中的快捷方式是一种快速完成应用程序中一项或多项任务的方法。 通过使用“快捷方式”应用程序创建一组任务，我们可以最大程度地减少用户从EVVIS设备复制OTP所需执行的操作数量。

The figure below shows an example of tasks created with Shortcuts that merges 3 different user actions into one, namely:

下图显示了使用快捷方式创建的任务示例，该任务将3种不同的用户操作合并为一个，即：

1. Launching the QR reader
   启动QR阅读器
2. Getting the text encoded in the QR code
   获取QR码中编码的文本
3. Copying the recognized text to the clipboard
   将识别的文本复制到剪贴板

will be replaced by one action: launching the Shortcut task only.

将由一个操作代替：仅启动快捷方式任务。

在哪里买？ (Where to buy?)

You can purchase the device directly on our online shop. Use the promo code below to get a 10% discount: HABR9MAXEOFG (expires on 31/08/2020).

您可以直接在我们的在线商店购买设备。 请使用下面的促销代码获得10％的折扣： HABR9MAXEOFG (有效期至2020年8月31日)。

«尽管FIDO / FIDO2更安全，为什么您仍要生产TOTP设备？» («While FIDO/FIDO2 is more secure why do you still produce TOTP devices?»)

We love FIDO, but it needs more time to become widely adopted and supported. Our research is driven by customer needs, and TOTP is still in high demand. The main reason is that it is much easier to implement, therefore many authentication systems still rely on TOTP.

我们喜欢FIDO ，但是需要更多的时间来得到广泛采用和支持。 我们的研究是由客户需求驱动的，并且对TOTP的需求仍然很高。 主要原因是它易于实施，因此许多身份验证系统仍然依赖TOTP。

翻译自: https://habr.com/en/company/token2/blog/513428/

totp