Detecting illegitimate code generators

An apparatus comprising:

• a memory;
• and
• at least one processor coupled to the memory;
• and
• a plurality of modules executing on the at least one processor, wherein the plurality of modules comprise:
• a first code generator module configured to generate a set of multiple verification algorithms;
• a second code generator module configured to generate multiple versions of an authentication code associated with a protected resource, wherein each of the multiple versions of the authentication code satisfies all of the multiple verification algorithms;
• and
• a first processor module configured to provide a first version of the authentication code from the multiple versions of the authentication code to a recipient, wherein the first version of the authentication code includes a first verification algorithm from the set of multiple verification algorithms;
• and
• a second processor module configured to provide a second version of the authentication code from the multiple versions of the authentication code to the recipient, wherein the second version of the authentication code includes (i) the first verification algorithm from the set of multiple verification algorithms and (ii) a second verification algorithm from the set of multiple verification algorithms.

A method comprising:

• generating a set of multiple verification algorithms;
• generating multiple versions of an authentication code associated with a protected resource, wherein each of the multiple versions of the authentication code satisfies all of the multiple verification algorithms;
• providing a first version of the authentication code from the multiple versions of the authentication code to a recipient, wherein the first version of the authentication code includes a first verification algorithm from the set of multiple verification algorithms;
• identifying an indication of attempted unauthorized access to the protected resource in connection with the first version of the authentication code;
• and
• providing, in response to the indication of attempted unauthorized access to the protected resource, a second version of the authentication code from the multiple versions of the authentication code to the recipient, wherein the second version of the authentication code includes (i) the first verification algorithm from the set of multiple verification algorithms and (ii) a second verification algorithm from the set of multiple verification algorithms;
• wherein said generating, said identifying, and said providing are carried out by a computing device.