Figure 3

Figure 3: PKCS#11-based authentication usually relies on physical smartcards. © Cardomatic