Multi-factor authentication using an authentication device

One or more non-transitory tangible media including instructions adapted to direct a processor to perform a series of operations, the operations comprising:

• receiving an authentication request from a primary service to authenticate a user of a user device;
• communicating a first authentication code to the user device for presentation to the user;
• communicating a second authentication code to an authentication device in the user's possession for presentation to the user, wherein the second authentication code is different than the first authentication code and includes a correspondence with the first authentication code;
• receiving a response message via the authentication device, wherein the response message includes an indication of whether the user has confirmed that the second authentication code corresponds with the first authentication code;
• in response to the response message including an indication that the user has confirmed that the second authentication code corresponds with the first authentication code, communicating an authentication response to the primary service indicating that the user is in possession of the authentication device and has authorized access to the primary service via the user device, wherein the authentication response is communicated when the user has indicated that the two authentication codes match;
• and
• wherein in response to the response message including an indication that the user has not confirmed that the second authentication code corresponds with the first authentication code, communicating an authentication response to the primary service indicating that the user has not authorized access to the primary service via the user device.

An apparatus for authenticating a user of a primary service, the apparatus comprising:

• one or more processors;
• one or more non-transitory tangible media including instructions executable by the one or more processors for:
• receiving an authentication request from a primary service to authenticate a user of a user device;
• communicating a first authentication code to the user device for presentation to the user;
• communicating a second authentication code to an authentication device in the user's possession for presentation to the user, wherein the second authentication code is different than the first authentication code and includes a correspondence with the first authentication code;
• receiving a response message via the authentication device, wherein the response message includes an indication of whether the user has confirmed that the second authentication code corresponds with the first authentication code;
• in response to the response message including an indication that the user has confirmed that the second authentication code corresponds with the first authentication code, communicating an authentication response to the primary service indicating that the user is in possession of the authentication device and has authorized access to the primary service via the user device, wherein the authentication response is communicated when the user has indicated that the two authentication codes match;
• and
• wherein in response to the response message including an indication that the user has not confirmed that the second authentication code corresponds with the first authentication code, communicating an authentication response to the primary service indicating that the user has not authorized access to the primary service via the user device.