On the Modem Properties Options tab, the user is offered the option of launching a terminal
window either before or after the connection is made. The option of opening a terminal window
after the connection is made is frequently necessary for hard authentication options such as
SecureID. This tab is shown in Figure 25.13.
Typically, the terminal window is launched with a challenge sent from the SecureID or a similar
third-party product. The challenge is a dynamically created value that is entered into a physical
calculator programmed to generate the proper response. This response is valid only for the
duration of the challenge—typically a minute—and it is a single-use password. These security
solutions require physical possession of the token, or password generator, and the PIN that
allows access. This security model is sometimes referred to as “something you have and something
you know.” Bank ATM cards use a similar principle.