Feitian c610

Feitian C610 – The OATH-compliant QR code OTP token with a built-in scanner for PSD2-compliant transaction signing and smartphone-independent Two-Factor Authentication

The Feitian C610 is a powerful evolution of the classic Hardware Token: Instead of a simple button press, it uses its built-in camera to scan the QR code of a website or application, reads the transaction data it contains, and generates a dynamically linked one-time code from it. The result is a hardware-based 2FA solution that goes far beyond mere authentication—while simultaneously meeting the highest requirements of the EU Payment Services Directive (PSD2) for Strong Customer Authentication (SCA) and Dynamic Linking.

QR Code Scanning: No More Manual Entry of Long Transaction Data

The key advantage of the C610 over conventional OTP tokens lies in its camera function: Transaction data such as account numbers or amounts no longer need to be laboriously entered by hand. The user scans the QR code displayed on the screen —the token automatically reads all relevant information, displays it on its 2.4-inch TFT LCD screen for confirmation, and then generates an OTP code that is dynamically linked to that exact transaction data. This “what-you-see-is-what-you-sign” principle provides reliable protection against tampering and man-in-the-middle attacks.

No BYOD—the ideal alternative to a smartphone app

The C610 is designed as a direct replacement for mobile authentication apps—specifically for environments where the use of personal smartphones is not permitted for security or Compliance reasons. It replaces app-based 2FA for services such as SWIFT Alliance Access, KeyCloak, Citrix Netscaler, DocuSign, and many others without compromising security or user convenience.

Technical Specifications

The C610 features a 2.4-inch TFT LCD display, a camera with 300K-pixel resolution, and a USB-C interface (USB 3.0) for charging the built-in battery. Supported algorithms: OATH TOTP (RFC6238) and Challenge/Response (OCRA RFC6287). The device measures 94 × 50 × 16 mm and weighs 41 g without batteries. The three AAA batteries and a coin-cell battery ensure a long operating time even without recharging.

PSD2-Compliant Transaction Signing

The C610 fully complies with the EU Payment Services Directive (PSD2) requirements for Strong Customer Authentication (SCA) and Dynamic Linking: Each generated code is dynamically linked to the specific transaction data and cannot be reused for other transactions. This makes the C610 the ideal solution for online banking, payment platforms, and financial service providers that must meet the highest regulatory requirements.

Who is the Feitian C610 suitable for?

Financial institutions, companies, and government agencies that require PSD2-compliant transaction signing, operate smartphone-free 2FA environments, or must comply with regulatory BYOD bans—as well as all organizations that wish to provide their users with an intuitive, tamper-proof, hardware-based authentication solution.