The process of RCA is very simple: Banks provide their customers with a hand-held card reader, which does not require any connection to a personal computer, equipped with a LCD display and a keypad.
Step 1
The customer inserts his EMV banking card into the reader and types in his secret PIN code.
Step 2
Step 2: A cryptographic key contained within the card’s chip creates a one-time password (OTP) – usually in the form of an 8 digit number.
Step 3
Step 3 : The customer can authenticate himself with the OTP whilst logging onto his bank's website or when completing a purchase at an online retailer.
The Challenge-Response mode
The user inserts his Chip & PIN banking card into the reader, types in his four-digit PIN Code to authenticate locally with the card; Having typed in a code provided by the Bank (the “challenge”), the reader then displays a dynamic password (the “response”) generated by the card chip. This eight digit passcode is valid for a single transaction and is used as the final stage of authentication when accessing bank details via the web portal ot when completing a purchase at an online retailer.