To use the online authentication function, the holder needs a six-digit decimal PIN. If the holder types in the wrong PIN, he has to type in the twelve-digit decimal access code given on the ID card to prove he/she really possesses the ID card. If the wrong PIN is used three times, a PUK must be used to unlock the chip.