Universal secure registry

An electronic ID device configured to allow a user to select an account associated with the user to employ in a transaction, the electronic ID device comprising:

• a biometric sensor configured to receive a biometric input provided by the user;
• a user interface configured to receive a user input, the user input including:
• secret information known to the user;
• and
• selection information concerning an account selected by the user from one or more accounts associated with the user;
• a communication interface configured to communicate with a secure registry;
• and
• a processor coupled to the biometric sensor to receive information concerning the biometric input, wherein the processor is programmed to:
• activate transaction software of the electronic ID device in response to a successful authentication of a user's identity, wherein authentication of the user's identity is based on at least one of the biometric input and the secret information;
• generate a one-time non-predictable value;
• obtain a public identifier that corresponds to private account information of the selected user account, wherein the public identifier does not contain any private account information of the selected user account;
• generate authentication information from the one-time non-predictable value and the public identifier;
• encrypt the authentication information;
• and
• wirelessly communicate the encrypted authentication information to a requesting or receiving device via an authentication signal generated by the communication interface, such that the secure registry:
• receives a transaction request and at least a portion of the encrypted authentication information from the requesting or receiving device, wherein the transaction request involves the selected user account;
• decrypts the encrypted authentication information;
• verifies the decrypted authentication information without using the private account information;
• uses the public identifier from the encrypted authentication information to acquire the private account information of the selected user account;
• and
• generates an enablement signal to enable the transaction request without transmitting the private account information.