Kolodgy recommends using a "token, " another type of device based on flash memory that functions as a key, made by companies such as Rainbow Technologies.
Google wants to hand off its proposal to standards bodies in the hopes that some form of PKI-based token authentication will be widely adopted by everyone from browser manufacturers, to website owners to device makers.