code verification carried out according to the challenge/response method