"At step 312, the client may provide access information, such as a PIN number or other information that may be used to access the client's account and/or other data." . . . .