TOKEN2 EVVIS-QR1 USB Programmable TOTP hardware token

Today, we are presenting a new type of TOTP hardware tokens — USB Programmable token that displays the OTP value as a QR code and also can send the current OTP value over USB as a part of its HID emulation feature.


What is EVVIS-QR1?

What is EVV and why is it important?
Presence verification features are highly demanded in a number of industries, and one of the most demanded features for medical institutions for cases where different parties are contracted to periodically visit patients to provide services. This applies not only to external service providers but also to providers within the same institutions. Often, hospital systems provide services within an enterprise, demonstrating the level of interoperation abstraction within the same organization. Usual methods of presence verification are consisting of a simple paper-based schedule table where the service providers just put the current date and time and their signature. Being simple enough and easy to implement, this method, however, does not guarantee the accuracy, as the signatures on the paper are easy to back-date and/or forward date. Using TOTP as a verification mechanism for EVV is secure enough, but not very user friendly (as the OTP needs to be typed in manually) and quite error-prone. The method introduced with EVVIS-QR1 device will allow to securely implement presence verification using a special mobile application and a static hardware token displaying two-dimensional barcodes without the need to enter any data manually, thus avoiding human errors.

One-touch OTP Entry

OTP is sent via USB (Keyboard Emulation)

OTP shown as a QR image

This feature may slightly improve the user experience even with standard software (i.e. mobile Safari under iOS). The process, illustrated on the figure below, is not only improving the speed of the process (even if slightly) but, more importantly, helps to avoid input errors when the OTP is typed in manually.

The speed of the process (yet to be evaluated and compared to manual input speed) can be further improved by leveraging the Shortcuts app functionality of modern iOS (v 12.0 and higher). A shortcut within this app is a quick way to get one or more tasks done with your apps. By creating a set of tasks using the Shortcuts app we can minimize the number of actions required to be done by the user to copy the OTP from the EVVIS device.

User action flow — OTP shown as QR code

The figure below shows an example of tasks created with Shortcuts that merges 3 different user actions into one, namely:

  1. Launching the QR reader
  2. Getting the text encoded in the QR code
  3. Copying the recognized text to the clipboard

will be replaced by one action: launching the Shortcut task only.

Tasks for automating the procedures

Where to buy?

MFA Evangelist