Multifactor network authentication

A network authentication device comprising:

• a network interface in signal communication with:
• a first user device associated with a first user;
• a second user device associated with a second user, wherein the second user is different from the first user;
• and
• an authentication engine in signal communication with the network interface, configured to:
• receive an authentication key request from the first user device, wherein the authentication key request identifies:
• an account linked with the first user;
• and
• the second user device;
• generate an authentication key in response to receiving the authentication key request;
• establish a first set of authentication rules for the first user, wherein the first set of authentication rules identifies:
• a number of authentication rules selected by the first user;
• and
• an authentication type for each authentication rule selected by the first user;
• establish a second set of authentication rules for the second user, wherein the second set of authentication rules identifies:
• a number of authentication rules selected by the second user;
• and
• an authentication type for each authentication rule selected by the second user;
• generate a first authentication key fragment comprising a first portion of the authentication key;
• generate a second authentication key fragment comprising a second portion of the authentication key;
• send the first authentication key fragment to the first user device;
• and
• send the second authentication key fragment to the second user device.

An authentication method, comprising:

• receiving, by an authentication server, an authentication key request from a first user device associated with a first user, wherein the authentication key request identifies:
• an account linked with the first user;
• and
• a second user device associated with a second user, wherein the second user is different from the first user;
• generating, by the authentication server, an authentication key in response to receiving the authentication key request;
• establishing, by the authentication server and the first user device, a first set of authentication rules for the first user, wherein the first set of authentication rules identifies:
• a number of authentication rules selected by the first user;
• and
• an authentication type for each authentication rule selected by the first user;
• establishing, by the authentication server and the second user device, a second set of authentication rules for the second user, wherein the second set of authentication rules identifies:
• a number of authentication rules selected by the second user;
• and
• an authentication type for each authentication rule selected by the second user;
• generating, by the authentication server, a first authentication key fragment comprising a first portion of the authentication key;
• generating, by the authentication server, a second authentication key fragment comprising a second portion of the authentication key;
• sending, by the authentication server, the first authentication key fragment to the first user device;
• and
• sending, by the authentication server, the second authentication key fragment to the second user device.