A computer-implemented method for generating a token set that associate permissions and privileges with a digital identity, the method comprising: receiving, from a requester and at a computing device of a certification authority, a first request for associating a first index of privileges and permissions with a digital biometric configured to function as a foundation token, the first index specifically encoding the privileges and permissions of a first subscriber in accessing transactional data of the requester , the first request including the digital biometric that identifies a person and has been issued to the requester by a trusted entity through a vetting process ; at the computing device of the certification authority, extracting, from the first request, the digital biometric ; at the computing device of the certification authority, determining that the extracted digital biometric is valid ; at the computing device of the certification authority, verifying that the requester is the person identified by the digital biometric based on a biometric of the requester matching the extracted digital biometric; at the computing device of the certification authority, in response to determining that the digital biometric is valid and verifying that the requester is the person identified by the digital biometric, associating the first index of privileges and permissions of the first subscriber with the digital biometric ; and providing, to the requester , the [claim 1] token set including the digital biometric associated with the first index of privileges and permissions of the first subscriber , the digital biometric configured to enable the first subscriber to access transactional data of the requester in accordance with the first index of privileges and permissions. receiving, from a requester and at a computing device of a certification authority, a first request for associating a first index of privileges and permissions with a digital biometric configured to function as a foundation token, the first index specifically encoding the privileges and permissions of a first subscriber in accessing transactional data of the requester , the first request including the digital biometric that identifies a person and has been issued to the requester by a trusted entity through a vetting process ; at the computing device of the certification authority, extracting, from the first request, the digital biometric ; at the computing device of the certification authority, determining that the extracted digital biometric is valid ; at the computing device of the certification authority, verifying that the requester is the person identified by the digital biometric based on a biometric of the requester matching the extracted digital biometric; at the computing device of the certification authority, in response to determining that the digital biometric is valid and verifying that the requester is the person identified by the digital biometric, associating the first index of privileges and permissions of the first subscriber with the digital biometric ; and providing, to the requester , the [claim 1] token set including the digital biometric associated with the first index of privileges and permissions of the first subscriber , the digital biometric configured to enable the first subscriber to access transactional data of the requester in accordance with the first index of privileges and permissions. <EOS>