Apparatus and method for authenticating access rights to a user equipment after the challenge-response principle