During user login, the control server CS using its share P2 assists the service server Z q and computes B2 = g1b2 g2 P2 (mod p) using his password share P2..