Doesn't Verified by Visa and SecurePay by Mastercard solve this problem? Whenever I enter a credit card I get asked to enter an online password as well.
Of course, ideally every citizen would be able to sign anything with a public-private key pair, counter-signed by the state.