When you are looking for an extra level of security for your organizations online processes, you will find that Public Key Infrastructure can provide you with exactly what you are looking for. This system is typically issued by a Certificate Authority such as Digi-Sign and consists of two parts, the first is the public key and the second is the user's digital signature. Both parts of the puzzle must match in order for anyone to gain access to the secured information.
At one end of the PKI authentication is something that is known, such as the person contact information. Typically this is stored in secure location and is considered to be the something you know part of the authentication process. Then there is the other half of the puzzle or the something you have part, this can be an OTP Token, a PKI USB token or a smart card. Without both factors providing a perfect match access will be denied.