BD - yeah - now you are on to a way of beginning to address this problem.
Its called user provisioning done via two-factor authentication using cryptographic tokens. RSA & VASCO security are two main global orgs leading the way of authenticating ones credentials.
However, this is just one part of the overall problem.
Cheers
Kooyong
