Agile OTP generation

1. A method for agile generation of one time passcodes (OTPs) in a security environment, the security environment having a validator and a token generator comprising a token generator algorithm, the method comprising:

generating a client OTP at the token generator according to a variance technique; wherein the variance technique is selected from a set of variance techniques;

receiving the client OTP at a validator, wherein the validator is different from the token generator;

determining, at the validator, the variance technique used by the token generator to generate the client OTP;

determining whether to validate the client OTP based on the client OTP and variance technique;

validating the client OTP based on the determination; and

where the variance technique is given by a function OTP=H(F(SKC, SKPC),InputSet), wherein H is a Hash and wherein the InputSet is a set comprising K and Time, wherein Time is the time for the OTP; wherein K is a key, SKC is a Symmetric Key certificate containing information about the key, F is a function or algorithm which switches among a plurality of OTP generation algorithms for each OTP generation, SKPC is a Symmetric Key Policy Certificate containing policy information about the key.

2. The method of claim 1 wherein the validator determines the variance technique of the set of variance techniques by using an information file containing information about the token.

3. The method of claim 2 wherein the information file is a certificate.

4. The method of claim 1 wherein information about one of the variance techniques of the set of variance techniques is encoded in the OTP.

5. The method of claim 1 wherein the variance technique is obtained from the environment of the OTP generator.

6. The method of claim 1 wherein the variance technique is obtained from variances within the OTP generator.

7. A system for agile generation of one time passcodes (OTPs) in a security environment, the system comprising:

a token generator comprising a token generator algorithm; wherein the token generator algorithm generates a client OTP at the token generator according to a variance technique; wherein the variance technique is selected from a set of variance techniques;

a validator comprising a processor configured to execute computer-executable program code stored in memory, wherein the computer-executable program code upon execution is configured to enable execution of:

receiving the client OTP at a validator wherein the validator is different from the token generator;

determining, at the validator, the variance technique used by the token generator to generate the OTP; and

determining whether to validate the client OTP based on the client OTP and variance technique;

validating the client OTP based on the determination; and

where the variance technique is given by a function OTP=H(F(SKC, SKPC),InputSet), wherein H is a Hash and wherein the InputSet is a set comprising K and Time, wherein Time is the time for the OTP; wherein K is a key, SKC is a Symmetric Key certificate containing information about the key, F is a function or algorithm which switches among a plurality of OTP generation algorithms for each OTP generation, SKPC is a Symmetric Key Policy Certificate containing policy information about the key.

8. The system of claim 7 wherein the validator determines the variance technique of the set of variance techniques by using an information file containing information about the token generator.

9. The system of claim 7 wherein information about one of the variance techniques of the set of variance techniques is encoded in the OTP.

10. The system of claim 7 wherein the variance technique is obtained from the environment of the OTP generator.

11. The system of claim 7 wherein the variance technique is obtained from variances within the OTP generator.

12. The system of claim 7 wherein the information file is a certificate.