System, apparatus, and methods for authenticating a device for access to a server. The method includes receiving a set of device-specific attributes from the device as a part of a device registration process, storing the set of device-specific attributes in a device attribute storage, and receiving a request to perform an operation using the device and involving the server. The method further includes transmitting a set of device-specific challenge questions derived from the set of device-specific attributes to the device, receiving responses to the set of device-specific challenge questions from the device, confirming that the responses each conform to the set of device-specific attributes, and enabling the operation involving the server.