Expert in building USB Token System -- 2

Development of a usb token / PKI
We need a USB token system to control and secure access our ERP https://www.odoo.com

the solution must be:
- open source, working under windows, android and apple

GPO Group Policy Options:
- and other securities rules that are implemented automatically into the computer when USB token inserted into a computer:
• Prohibit access to the control panel. ...
• Prevent access to the command prompt. ...
• Deny all removable storage access. ...
• Prohibit users from installing unwanted software. ...
• Reinforce guest account status settings. ...
• Do not store LAN Manager hash values on next password changes
• Block USB ports
• Computer screen idle after 60 second

to acces to a defined application, for instance ODOO:
- user must put usb key into a port, PC is automatically configured with GPOs'
- user must have his mobile in NFC mode (if he goes away with his mobile, all apps shut down and screen goes idle)
or
- user enter a received code on an a proprietary app

or
- both

Please send proposal including recommended USB hardware that you will use.