Managing cryptographic keys based on identity information

A non-transitory, computer-readable storage medium storing one or more instructions executable by a computer system to perform operations comprising:

• receiving biometric information associated with a user and a request to store a user key pair to a memory on an identity cryptographic chip (ICC);
• comparing the biometric information associated with the user with biometric information pre-stored in the memory as pre-stored biometric information, wherein the pre-stored biometric information is stored in the memory during initialization of the ICC, and wherein initialization of the ICC comprises:
• storing first cryptographic operation code executable to add a digital signature based on the user key pair;
• and
• storing second cryptographic operation code executable to perform file encryption or file decryption based on the user key pair;
• in response to determining that the biometric information associated with the user matches the pre-stored biometric information, encrypting the user key pair to provide an encrypted user key pair;
• and
• storing the encrypted user key pair to the memory,
• wherein the request to store the user key pair is a first request, the biometric information is first biometric information, and wherein the operations further comprise:
• receiving second biometric information and a second request for adding a digital signature to a file;
• authenticating the second request based on matching the second biometric information to the pre-stored biometric information;
• and
• adding the digital signature to the file based on the first cryptographic operation code and a private key of the user key pair.

A system, comprising:

• one or more computers;
• and
• one or more computer memory devices interoperably coupled with the one or more computers and having tangible, non-transitory, machine-readable media storing one or more instructions that, when executed by the one or more computers, perform one or more operations comprising:
• receiving biometric information associated with a user and a request to store a user key pair to a memory on an identity cryptographic chip (ICC),
• comparing the biometric information associated with the user with biometric information pre-stored in the memory as pre-stored biometric information, wherein the pre-stored biometric information is stored in the memory during initialization of the ICC, and wherein the initialization of the ICC comprises:
• storing first cryptographic operation code executable to add a digital signature based on the user key pair, and
• storing second cryptographic operation code executable to perform file encryption or file decryption based on the user key pair,
• in response to determining that the biometric information associated with the user matches the pre-stored biometric information, encrypting the user key pair to provide an encrypted user key pair, and
• storing the encrypted user key pair to the memory,
• wherein the request to store the user key pair is a first request, the biometric information is first biometric information, and wherein the one or more operations further comprise:
• receiving second biometric information and a second request for adding a digital signature to a file,
• authenticating the second request based on matching the second biometric information to the pre-stored biometric information, and
• adding the digital signature to the file based on the first cryptographic operation code and a private key of the user key pair.