User Authentication

Dear all,
Hope to be in the correct forum for my question.

I’m searching for a way of second authentication for an internet banking system with the use of Token or Fob. But has to do with secure session management where only authorised request are send to the original webserver.

Beside the secure session,I need an interface that can identify the user directly from the web-application.

It can be a Java based interface, an IP-socket interface or HTTPS interface.

Any help how I can make this posibble??????