What we really need are private keys, stored in hardware, like secure enclave. Whenever someone wants a proof of your identity, they ask you to sign a certain message with a timestamp.