(1) Prerequisite For the specification, CBM will conduct required review and confirmation in timely manner. 3.2.4.2.3 User Authentication To strengthen user authentication for CBM-NET, two-factor authentication will be introduced in Phase 2. USB token authentication will be adopted in addition to the current ID / password authentication. (A) Prerequisites  In CBM-NET data center (both in production/primary environment and DR environment), RSA servers should be installed.  In each location where CBM-NET terminals are used, the secure place (e.g. locked cabinet, appointment of staff in charge) should be prepared to store USB tokens.  CBM shall issue and control USB tokens.  Five hundred tokens will be provided in Phase 2 development. Extra tokens should be procured by the Myanmar side if necessary. (B) Structure The following diagram shows how user authentication works after Phase 2. Onetime password and the digital certification from a USB token will be used. 67