Table 5 Sequence of messages and actions for data authentication ceremony
Nr. | Message/action description |
|---|---|
1. | User types the transaction data in a browser window on the client computer |
2. | User activates the OffPAD to take a snapshot of the browser window |
3: | Snapshot is taken of the text displayed in the browser window on the VDU |
4. | The OCR function recovers the transaction data from the snapshot |
5. | MAC generation with the transaction data and the user-password as input |
6. | OffPAD send the MAC to the client computer |
7. | Client computer sends transaction data together with MAC to server |
8. | Server verifies that the MAC corresponds to the received transaction data. |