It's a PKI system, your card holds two certificate, one for authenticating that you unlock with a 4 number PIN and one for digital signing that you unlock using a 10 char password. It also has Sony's FeLiCa standard for NFC reading. You can also tie your own generated certificate to it but it seems quite complex and expensive to do so.