Yup. Remote biometrics? Forget about it. Another big problem with biometrics is that if they're "stolen" then you can't revoke them. That said, if you control

Yup. Remote biometrics? Forget about it. Another big problem with biometrics is that if they're "stolen" then you can't revoke them. That said, if you control the hardware and physical environment where the biometrics are used then it's hard to use the stolen biometrics. I could see a case for going to an office that was approved by the government to verify your biometrics. That way the hardware and physical environment would be controlled. The office could have people verifying that you don't, for example, have fake fingerprints over your real ones. Then that office could act like a certificate authority and generate a certificate that links your identity to a newly generated public key. Then all authentication would be done using the private key and certificate instead of using the biometrics directly. In such a case, stolen biometric data wouldn't be useful since it'd be hard to get past physical inspection.