Document ID: chunk:federal_register_of_legislation:F2024L01435:reg:8
Version: federal_register_of_legislation:F2024L01435
Segment Type: reg
Provision Reference: reg 8
Character Range: 56524–57418

8                                                      Time-based OTPs:                                                                        must have a defined lifetime that is determined by the expected clock drift, in either direction, of the authenticator over its lifetime, plus allowance for network delay and individual entry of the OTP.

3.6  Multi-factor one-time password devices
  For multi-factor one-time password devices, the standards in the following table apply.
Note:  When using biometric information as a factor for multi-factor one-time password devices, section 3.13 applies.

Standards for multi-factor one-time password devices

Item                                                  Requirements:                                                                                                                                                          the standard is: