I work with a team that is developing a beta implementation of strong authentication for OpenID using a number of different authentication devices,
TrustBearer OpenID.

We’ve found that this infinitely decreases the possibility of someone fraudulently accessing another persons’ account. We’ve found some compelling ways to thwart phishing here, as well. We use a web browser add-on to manage the authentication process, and we actually check the validity of sites here. A user’s private data also remain private during OpenID authentication.

We’ve been concentrating on simple user experience at this point,
and we are interested to learn what sort of features user will look
for in this type of openID implementation.

With our OpenID, you basically just set-up a strong authentication device
and then link the device to your OpenID URL.