An authentication method that proves the identity of users logging into a network. When a user logs in, the access server or authentication server sends a random number (the challenge) to the client.