below in the enrollment process the username and or password is created by the user after the identity of the user is established the username and or password are typically a combination of characters and numbers which the user can easily remember in one embodiment the user machine 105 transmits the username and or password in a cryptographically protected form so access to the actual username and or password will be difficult for a snooper who gains internal access to the user machine 105 with respect to the second factor of authentication the unique information about the user machine 105 is generally a combination of select information associated with the user machine 105 the information may be static or dynamic for instance the information may include the international mobile equipment identity imei which is a number unique to every mobile phone the international mobile subscriber identity imsi which is a unique number associated with network mobile phone users and or the geolocation of the user machine 105 which is a real world geographic location of a network connected computer or mobile device the information about the user machine 105 may also include machine level attributes for instance the information may include various parameters available through a pci configuration space like the device id or the vendor id for different system devices the data residing in the smm memory space or other memory hardware attributes such as memory type memory clock speed amount of memory hard drive serial number size of hard drive maker of hard drive etc.