Check out the following link how Yes Bank implemented two factor authentication.
http://us.rediff.com/money/2005/sep/20secure.htm
Briefly,
First level Authentication using Username & Password
Second level Authentication using one-time use transaction password and that was sent to the mobile handset using (SMS).