If a mystery is shipped by the verifier towards the out-of-band unit, the device SHOULD NOT Exhibit the authentication mystery although it is actually locked via the operator (i. The verifier SHALL use authorized encryption and an authenticated protected channel when requesting mem