[kbenson]

If you look at the SecurID wikipedia[1] page, in the references you can find a paper discussing two factor authorization in 1996[1]. Also, it's not defining two factor authentication, it assumes the reader knows what it is.

[1]: http://en.wikipedia.org/wiki/SecurID

[2]: http://www.homeport.org/~adam/dimacs.html