If a user owns a token and decide to associate it with his account. The token presence will be verified (so is the regular password) before granting access to the account.
We already integrated our technology in the most famous open source solutions including phpBB, SMF and vBulletin.
You can get information about our token at http://www.swekey.com and feel free to ask if you have any question regarding the hardware authentication.