For protecting a transaction using the transaction security function, the two things that must be done are?