As a user above stated, use an oAuth service from the government. When at a business you could "prove" to their system who you are by authenticating with the go

As a user above stated, use an oAuth service from the government. When at a business you could "prove" to their system who you are by authenticating with the govt service with your private key (most likely on a smart card like the military's CAC card). The business then gets an oauth token that you could revoke. If you lose your private key you would have to go to some government services office and bring additional documents to prove who you are just like a passport.