TOKEN2 EVVIS-QR1 USB Programmable TOTP hardware token

Today, we are presenting a new type of TOTP hardware tokens — USB Programmable token that displays the OTP value as a QR code and also can send the current OTP value over USB as a part of its HID emulation feature.


What is EVVIS-QR1?

EVVIS-QR1 is a hardware device developed primarily for Electronic visit verification (EVV) information systems (hence the name). It is a standards-based TOTP hardware token that can also be programmed over USB. The OTP generated is shown on the display both as regular digits as well as a QR image. Both features (OTP shown as QR code and HID keyboard emulation) are intended to make it possible to minimize typos when entering the OTP.

One-touch OTP Entry

EVVIS-QR1 device can send the OTP over USB thanks to HID emulation function built-in (Windows only). This will allow minimizing the user actions needed to authenticate with any 2FA-enabled system. You can configure the device to send the OTP digits together with ‘Enter’ keystroke (ASCII char 13) — this adds the convenience of minimizing user actions needed for logging on to a system (i.e. a Web login form with the second-factor field), as the pressing the Enter key on the keyboard will be emulated, and the form requesting the OTP will be submitted automatically without the need of clicking the submit button.

OTP is sent via USB (Keyboard Emulation)

OTP shown as a QR image

The devices showing the OTP as QR code have the most potential of greatly improving user experience when a special app is used. This is perfect for TOTP based electronic verification systems.

This feature may slightly improve the user experience even with standard software (i.e. mobile Safari under iOS). The process, illustrated on the figure below, is not only improving the speed of the process (even if slightly) but, more importantly, helps to avoid input errors when the OTP is typed in manually.

The speed of the process (yet to be evaluated and compared to manual input speed) can be further improved by leveraging the Shortcuts app functionality of modern iOS (v 12.0 and higher). A shortcut within this app is a quick way to get one or more tasks done with your apps. By creating a set of tasks using the Shortcuts app we can minimize the number of actions required to be done by the user to copy the OTP from the EVVIS device.

User action flow — OTP shown as QR code

The figure below shows an example of tasks created with Shortcuts that merges 3 different user actions into one, namely:

  1. Launching the QR reader
  2. Getting the text encoded in the QR code
  3. Copying the recognized text to the clipboard

will be replaced by one action: launching the Shortcut task only.

Tasks for automating the procedures

Where to buy?

You can purchase the device directly on our online shop.

MFA Evangelist