3.3.4.5 One-time Password (OTP) Event

In addition to the local events specified in section 3.1.4.1, the control point:

  1. MUST generate _HostConfirmNonce.

  2. MUST set the following elements and send them in an Exchange Message (section 3.2.4.1.1.1):

    • <HostID>, as acquired in section 3.1.4.1.

    • <HostCertificate>, as acquired in section 3.1.4.1.

    • <HostConfirmAuthenticator>, an HMAC as specified in section 3.1.1, calculated as:

      Base64( HMAC(_HostConfirmNonceUTF-8 (N+ OTP+ _HostID+ _HostCertificate) ).