Protecting multi-factor authentication

The method according to 3, wherein;

• the first device is a personal computer (PC) and the second device is a mobile device.

An apparatus comprising a processing system, the processing system comprising at least one processor and a memory storing a set of computer instructions such that the processing system is configured to cause the apparatus at least to:

• monitor state information of a first and a second device, both of which are associated with a single user, the state information indicating whether or not the device associated with the state information has been active on an Internet domain;
• and
• during a multi-factor authentication procedure which utilizes one of the first and the second devices for authorizing a transaction by the Internet domain, participate in a supplemental security procedure, the supplemental security procedure conditional on the monitored state information of the other of the first and the second devices.

The apparatus according to 8, wherein:

• the first device is a personal computer (PC), the second device is a mobile device different from the PC, and the apparatus comprises at least one computer server which monitors the state information via client software applications installed in the PC and in the mobile device.

(canceled)

The method according to 11, wherein:

• the first device is a personal computer (PC) and the second device is a mobile device which executes the method.

17-22. (canceled)