Abstract: Revocable biometric-based keys for digital signing are provided by, in part, generating a revocable public key at a secure device and transmitting the public key to a registration system for registration to facilitate linking the public key to the secure device user's identity for use in accessing a protected resource. Generating the revocable public key may include generating a salt, storing the salt on the secure device, and temporarily obtaining, by the secure device, biometric data of the user of the secure device. The biometric data is obtained from user biometrics, and the temporarily obtaining is absent storing the biometric data in persistent storage. A public and private key pair is generated at the secure device based, at least in part, on the stored salt and the user's temporarily obtained biometric data.

Abstract: Revocable biometric-based keys for digital signing are provided by, in part, generating a revocable public key at a secure device and transmitting the public key to a registration system for registration to facilitate linking the public key to the secure device user's identity for use in accessing a protected resource. Generating the revocable public key may include generating a salt, storing the salt on the secure device, and temporarily obtaining, by the secure device, biometric data of the user of the secure device. The biometric data is obtained from user biometrics, and the temporarily obtaining is absent storing the biometric data in persistent storage. A public and private key pair is generated at the secure device based, at least in part, on the stored salt and the user's temporarily obtained biometric data.