Breaking the pattern of conventional multi-factor authentication