Here in Sweden we have a solution called BankID that is pretty much that. To get the key the first time you need to go physically to a location to identify your

Here in Sweden we have a solution called BankID that is pretty much that. To get the key the first time you need to go physically to a location to identify yourself, after that you can use your BankID to get a new one when your first is about to expire(this is basically rolling your private cert) Never heard of any successful identity thefts in this system, except where someone has been tricked into signing something with their BankID that they shouldn't have. That's pretty hard to defend against on a systematic level though, at least in a way that's fool-proof. https://www.bankid.com/ https://www.bankid.com/