Uh huh, and where does the signature come from? It doesn’t matter how many process steps or layers of obfuscation you put in the way, at some point the verification ends at a database of original ID information which must be network connected in order to be useful. No one can be trusted to hold such a database safely.