JavaCard OS

My requirement is to save some data in java card safely and I am trying to make two object of OwnerPIN for security.
One object is for user authentication, the other is for terminal authentication. We can read or update the data successfully only if both the user authentication and terminal authentication are successful .
Is my thought above proper? Does anyone have other good points?

OwnerPIN provides security features. So for user authentication, the OwnerPIN is surely a good way to carry out.

For terminal authentication, you may need to choose some form of mutual authentication instead of a simple PIN code for security.