A method comprising: receiving (S202), by a user device , a first biometric template of a user; generating (S203), by the user device, a derivative of the first biometric template; generating (S205), by the user device, an identity request message for an electronic identity for the user, the identity request message comprising the derivative of the first biometric template and an account identifier of the user; sending (S206), by the user device, the identity request message to a verification server , wherein the verification server verifies the account identifier and generates the electronic identity, and wherein the electronic identity is linked to the derivative of the first biometric template in a database by a processing server computer ; receiving (S214), by the user device, an identity response message comprising the electronic identity; storing (S215), by the user device, the electronic identity in a memory of the user device for later use in an interaction; receiving (S217), by the user device, a second biometric template of the user; providing (S221), by the user device, an authentication request message comprising the electronic identity and a derivative of the second biometric template of the user to a resource provider computer to conduct the interaction, the authentication request message being forwarded to the processing server computer by the resource provider computer; and receiving (S229), by the user device, an authentication response message comprising an authentication result from the processing server computer, wherein the authentication result is determined by the processing server computer based on a comparison of the derivative of the second biometric template to the derivative of the first biometric template accessible to the processing server computer, and wherein the authentication result is also based on a validity of the electronic identity. receiving (S202), by a user device , a first biometric template of a user; generating (S203), by the user device, a derivative of the first biometric template; generating (S205), by the user device, an identity request message for an electronic identity for the user, the identity request message comprising the derivative of the first biometric template and an account identifier of the user; sending (S206), by the user device, the identity request message to a verification server , wherein the verification server verifies the account identifier and generates the electronic identity, and wherein the electronic identity is linked to the derivative of the first biometric template in a database by a processing server computer ; receiving (S214), by the user device, an identity response message comprising the electronic identity; storing (S215), by the user device, the electronic identity in a memory of the user device for later use in an interaction; receiving (S217), by the user device, a second biometric template of the user; providing (S221), by the user device, an authentication request message comprising the electronic identity and a derivative of the second biometric template of the user to a resource provider computer to conduct the interaction, the authentication request message being forwarded to the processing server computer by the resource provider computer; and receiving (S229), by the user device, an authentication response message comprising an authentication result from the processing server computer, wherein the authentication result is determined by the processing server computer based on a comparison of the derivative of the second biometric template to the derivative of the first biometric template accessible to the processing server computer, and wherein the authentication result is also based on a validity of the electronic identity. <EOS>