To prevent "replay attacks," a new must be generated for every single transaction:
The Card's UDK and the Application Transaction Counter (ATC) . arqc_gen.rar
The top-level secret stored in a Hardware Security Module (HSM). To prevent "replay attacks," a new must be