Apparatus and method for authenticating a user via multiple user devices

A method, comprising:

• forming, during access to a server, an association between a user and a first device used to access the server, wherein the association constitutes a first possession factor linking the user to the first device without reliance upon all things known by the user;
• sending a code to the first device;
• receiving the code and contact information for a second device associated with the user, wherein the contact information facilitates a second possession factor linking the user to the second device without reliance upon all things known by the user except for the contact information;
• recognizing, during a subsequent access to the server, the first device and therefore establish the first possession factor;
• sending a message to the second device in response to recognizing;
• obtaining a positively acknowledged message from the second device and therefore establish the second possession factor;
• and
• authenticating the user based upon the first possession factor and the second possession factor without reliance upon all things known by the user.