Supported Flows

The OCRA API provide the following Mutual Challenge Response Flows:

Without using hardware tokens or smart cards

The following sequence diagram describes the OCRA Mutual Challenge Response flow implemented by the OCRA API.

In order to access the OCRA-API a valid api-key is needed. The Notification API is an optional component, which is available on the Trust1Team Marketplace, you can choose to implement your own or use a 3rd Party API as well.

Using the Trust1Connector (no hardware needed)

Using a hardware token or a smartcard with OCRA applet