My quick thought was to have the OS display a random char sequence, which must be typed on the keyboard before input is accepted.

Usability could be optimized depending on how uniquely identifiable keyboards are (to reduce when trust prompts are shown).