I have been working on a way to show the differences in the different ways of 2 Factor and OOB. Does below make any sense at all? (Note: the type names I just made up)

1 = User Computer
2 = System 1 wants access to. (like a website)
3 = Security Server
4 = 2nd factor device. (cell phone)

SFORs Patent is for:
1 and 2 can talk
2 and 3 can talk
3 and 4 can talk

1 and 3 CANNOT talk to each other
1 and 4 CANNOT talk to each other
2 and 4 CANNOT talk to each other

_____________________________________

Full 2 Channel MF/OOB (SFOR patent):
1 connects to 2 and enters username and password
2 contacts 3 and requests verification
3 sends request to 4
user responds to 4
4 sends confirmation to 3
3 tells 2 the user is ok
2 lets 1 into 2


Half 2 Channel MF/OOB:
1 connects to 2 and enters username and password
2 contacts 3 and requests verification
3 sends request to 4
1 responds to 2 with text from 4
2 lets 1 into 2


Full 1 Channel MF/OOB?:
1 connects to 2 and enters username and password
2 sends request to 4
1 responds to 2 with text from 4
2 lets 1 into 2


RSA Token (2 factor ONLY / No OOB):
1 connects to 2 and enters username and password
2 ask 1 for code from fob or software
1 enters code
2 lets 1 into 2