Techniques suitable for identifying potential subjects for a clinical trial and other applications are disclosed. The client software has no knowledge of what the correct PIN should be and always generates a normal looking OTP based on whatever PIN is entered, and the only way to learn whether or not the OTP is correct is to submit it during user login. A pair of positioning pieces and a protrusion is formed on the bottom plate.