scope:

The one time password (OTP) authentication service supports multi-factor authentication through an OTP token that creates a password for one-time use only. OTP has been developed to cope with fundamental security threats inherent in the traditional static password while requiring each OTP user to have several OTP tokens for the authentication service unless a management framework is provided. This framework enables using the service with only one token.

This Recommendation provides the management framework of a one time password (OTP)-based authentication service to support multi-factor authentication. In addition, it offers an interoperable management framework that allows sharing of a single OTP token among different service providers.

Specifically, this Recommendation provides the following:

- overview of an OTP-based authentication service;

- a general management framework including an OTP management model, OTP management operations, and security considerations in providing the OTP-based authentication service;

- additional features for the interoperable management framework for sharing the OTP token.