Figure 4—Once mutual authentication between the card and the terminal is complete, an authorized action can take place.