Abstract: Revocable biometric-based keys for digital signing are provided by, in part, generating a revocable public key at a secure device and transmitting the public key to a registration system for registration to facilitate linking the public key to the secure device user's identity for use in accessing a protected resource. Generating the revocable public key may include generating a salt, storing the salt on the secure device, and temporarily obtaining, by the secure device, biometric data of the user of the secure device. The biometric data is obtained from user biometrics, and the temporarily obtaining is absent storing the biometric data in persistent storage. A public and private key pair is generated at the secure device based, at least in part, on the stored salt and the user's temporarily obtained biometric data.

Abstract: Revocable biometric-based keys for digital signing are provided by, in part, generating a revocable public key at a secure device and transmitting the public key to a registration system for registration to facilitate linking the public key to the secure device user's identity for use in accessing a protected resource. Generating the revocable public key may include generating a salt, storing the salt on the secure device, and temporarily obtaining, by the secure device, biometric data of the user of the secure device. The biometric data is obtained from user biometrics, and the temporarily obtaining is absent storing the biometric data in persistent storage. A public and private key pair is generated at the secure device based, at least in part, on the stored salt and the user's temporarily obtained biometric data.

Abstract: In various embodiments, transactions initiated by or on behalf of users between client systems and transaction systems are sent to authorization systems for approval. An authorization system contacts one or more registered devices for approval from a user of the registered devices for the transactions initiated by or on behalf of the users that are being handled by the transaction systems. A registered device sends an approval or denial based on user input. The authorization server then sends the approval or denial to a transaction system to complete a transaction.