mCode EPC1.3

“mCode EPC is a convenient mobile based 2FA “second factor” authentication mechanism completed using One Time passwords (OTP) that are displayed on the Android device.
mCode EPC provides a robust cryptographically based, PIN protected and standalone solution that does not require ongoing availability of the mobile network.

mCode EPC is intended for organisations that are seeking to improve the assurance level of user authentication for online services are electing to utilise two factor authentication mechanisms whereby a user will have an independent hardware authentication token with the following characteristics:
- PIN protected access to the token and associated authentication service
- Authentication is completed using a One Time Password (OTP) that is displayed on the Token and then submitted through an Internet or IVR system to the organisation’s online site and validated via a standards based interface to an authentication service
- The OTP is algorithmically based with robust protection of the cryptographic keys within the Token
- The OTP verification service is robust and network connectable and provides for cross-authentication of the service with requesting application or network systems”