S retrieves n from the account database of Ui and then computes K = f(SK1 ,IDi ,n). If the equation C1 = f(K, r, T) holds, S accepts Ui's login request. Otherwise, S .