REINER SCT tanJack® deluxe – hardware TAN and TOTP generator for banking and 2FA authentication

REINER SCT tanJack® deluxe – hardware TAN and TOTP generator for banking and 2FA authentication

Manufacturer: REINER Kartengeräte GmbH & Co. KG

REINER SCT is a German manufacturer of solutions for secure authentication, online banking, and identity protection. In the documentation for the tanJack® deluxe, the manufacturer identifies Germany as the location of the product's design and development. REINER SCT also declares that its security products, including the tanJack® deluxe, are developed and manufactured in Germany.

The tanJack® deluxe is a standalone hardware device combining two functions: a TAN (Transaction Authentication Number) generator for online banking and a hardware TOTP (Time-Based One-Time Password) generator used as a second factor for 2FA (Two-Factor Authentication).
The device operates independently of computers and smartphones and does not require an Internet connection to generate codes. The keys used to create TOTP codes are stored within the device's secure hardware component. The tanJack® deluxe supports over 100 TOTP accounts, allowing it to replace smartphone-based authenticator apps.
For banking applications, the device supports standards such as chipTAN QR and Sm@rt-TAN photo. Its built-in camera reads the QR code or color matrix code displayed by the online banking system, while transaction details and the generated TAN are shown on the device's own screen. A compatible bank card, inserted into the integrated card reader, is used to generate the TAN. reiner-sct.com
Operation is handled via a 3.5-inch color touchscreen. The device also features PIN protection, a real-time clock, and additional functions such as an LED flashlight, camera, and calculator, as well as a display showing the date, time, and temperature.

Technical specifications

- Device type: Hardware TAN and TOTP generator
- Supported TAN mechanisms: chipTAN QR, chipTAN manual, Sm@rt-TAN photo, Sm@rt-TAN manual
- Supported codes: QR compliant with DK chipTAN QR / HHD QR and DK HHD FM color matrix code
- Supported HHD versions: 1.3.2, 1.4 / 1.5
- Supported chipTAN versions: 1.1, 1.2 with AMS
- Supported cards: Cards with a contact-based chip compliant with ISO/IEC 7816
- Supported bank cards: SECCOS cards from the German banking sector (DK), version 6.x or higher, with TAN application
- Card voltage: ISO 7816-3 Type B, 3.0 V
- Card protocol: T=1
- Card reader: 8 precision gold-plated contacts
- TOTP authentication standard: OATH-TOTP compliant with RFC 6238
- Supported TOTP algorithms: SHA-1, SHA-256, SHA-512
- Number of TOTP accounts: over 100
- New TOTP code generation: every 30 seconds
- Key storage: secure hardware chip / non-volatile memory
- PIN protection: yes
- PIN length: 5 to 12 digits
- Time synchronization: one-way via encrypted QR code
- Time zone support: yes, configuration via encrypted QR code
- RTC (Real-Time Clock): precision quartz clock with automatic calibration
- Average clock deviation: below 1 ppm at a reference temperature of 25°C after synchronization
- Display: 3.5" color TFT
- Display interface: capacitive touchscreen
- Resolution: 320 × 480 pixels
- Display area: approx. 73 × 49 mm
- Camera: color CMOS camera
- Camera viewing angle: 57°
- Power supply: built-in lithium-ion battery
- Battery capacity: 420 mAh / 1.52 Wh
- Standard color: black
- Device dimensions: approx. 112 × 70.5 × 13.5 mm
- Charging station dimensions: approx. 70.5 × 54.5 × 43 mm
- Device weight: approx. 220 g
- Weight with packaging: approx. 330 g
- Operating temperature: 0°C to +45°C
- Storage temperature: -20°C to +50°C
- Permissible humidity: max. 78%, non-condensing
- Vibration resistance: 10–75 Hz, 10 m/s² according to ISO/IEC 60068-2-6
- Drop test: 1 m according to DIN EN 60068-2-31
- Flashlight function: white LED, timer, and SOS function
- Camera function: yes
- Calculator: standard and scientific
- Additional displays: time, date, and temperature
- REINER SCT catalog number: 2 708 200-000
- EAN: 4011170084352
- Manufacturer's warranty: 2 years
- Compliance declared in documentation: CE, WEEE, RoHS2, BattG
- Set: tanJack® deluxe, charging station, USB-A to USB-C cable (charging only), USB power adapter, and quick start guide.

Software required for operation
For basic use, no additional software or driver installation is required.

To synchronize time and set the time zone, REINER SCT uses its own web services to generate an encrypted QR code, which is then scanned by the device. This does not require the installation of a local application.

Hardware and system requirements
For TOTP authentication
The tanJack® deluxe does not impose standard system requirements regarding Windows, macOS, Linux, Android, or iOS, as it does not communicate directly with the operating system.
It can be used with:
- a smartphone,
- a tablet,
- a notebook,
- a desktop computer.
The prerequisite is that the service in question supports the OATH-TOTP mechanism compliant with RFC 6238. Consequently, the account must allow for the configuration of a TOTP application or authenticator, typically by displaying a QR code during 2FA activation.

For online banking
The following are required:
- a compatible banking chip card,
- bank support for the appropriate method (e.g., chipTAN QR or Sm@rt-TAN photo),
- an online banking system that displays the supported QR code or matrix code.
The manufacturer primarily specifies compatibility with solutions from the German banking sector and SECCOS DK cards. Therefore, one should not automatically assume that the TAN function is compatible with Polish banks; compatibility must be verified with the specific bank.

Applications
The tanJack® deluxe can be used primarily for:
- securing online accounts using hardware-based two-factor authentication (2FA),
- generating TOTP codes without the need to install an authenticator app on a phone,
- centrally storing over 100 TOTP accounts,
- securing corporate and administrative accounts,
- protecting access to cloud services, portals, websites, and systems that support the TOTP standard,
- authorizing banking transactions using chipTAN QR,
- authorizing transactions using Sm@rt-TAN photo,
- personal use,
- professional and business use.

Advantages

Standalone offline design
TOTP codes are generated without an Internet connection. The authenticator itself requires neither a network connection nor a cloud account.

Separation of the second authentication factor from the smartphone
The TOTP secret does not need to reside on the phone used to access the protected service.

Hardware-based key storage
TOTP keys are stored in the device's secure chip; according to the documentation, they remain saved even if the battery drains completely. 

Supports over 100 TOTP accounts
A single device can be used to secure a large number of user accounts.

Multi-algorithm support
Support for SHA-1, SHA-256, and SHA-512 enhances compatibility with services using OATH-TOTP.

Additional PIN protection
Device access can be secured with a 5–12 digit PIN. reiner-sct.com

No operating system dependency
There is no need to install drivers or maintain apps for Windows, macOS, Android, or iOS.

Versatile use
The same device can serve as both a hardware 2FA authenticator and a TAN generator for compatible online banking services.

Built-in display and camera
Operations are not performed "blindly." The device features its own screen and code-reading system.

Rechargeable battery and charging dock
No need for regular battery replacement.