There needs to be a national data base with finger prints, pictures and maybe even DNA.
No card is going to be forge proof.
No, you control who gets in, where every "guest" and "visitor" is and if they have left or overstaid their visa, and then you go get them, period. "Control" takes place in the procedures required in the country of origin, by our own consulates in that country and no one else gets in; no one across an unguarded section of the border because you do not allow unguarded sections of the border.