Duke Power receives a sign-in request and then in detail 9 asks the subscriber 607C for at least one shared secret (authentication token), examples of which would be information readily known such as mother's maiden name, social security number, father's middle name, etc.