Physical cryptographic tokens meet this requirement: something you have-possession of the token itself-and something you know-the PIN to operate it.