I don’t know if it fits, but I find it interesting.
First of all, some banks have their own payment methods for online payments, and this is one of them. You may encounter it as alternative to VISA/MasterCard on some e-shops, for example when buying a train ticket at ZSSK.
With an app, you just scan QR code and send the payment.
But, what if I want to do it without an app?
On the left is first major step. Log in with PID + Password + OTP.
And the OTP is when this reader comes into play. Insert card, select code, enter PIN, and re-type the response into the website.
On the right is the second major step, confirming the payment. Ok, you already proved you own the card, so… but anyway.
Select “payment” by repeatedly pressing menu button, enter PIN, amount, recipient account number, and confirm with response.
Probably too annoying if you actually need to use it, but I find it interesting that there’s extra hardware for this purpose.
A number of banks here used to use a system like this a couple of decades ago. You’d get a card reader-calculator thing like in the pictures and there was a similar challenge-response flow. I’ve got no idea if they are even supported any more; I’ve definitely not seen one in a long time.
I remember “I’ll transfer you back when I can get my reader at home” and similar was not uncommon to hear
In Belgium, can confirm they are still widely used. These and eid readers are being replaced by an ID verified app, but I’d say every major bank still has the challenge auth available.
I think most of the uk banks still support them, though they don’t send you one by default anymore (you have to request one, which is fair enough as most people don’t need them). Also they all seem interchangeable, I used an old one from a different back to authorise a large payment recently.