1) for every human must be a unique hash id
2) it is not possible to build this hash id without the real person ( it is not possible to build in an automatic way these id)
3) decentralized , without a certifier authority
It doesn't seem possible for it to be decentralized.
If you were to go the DNA route you could do sha 256(DNA+password)
That would prevent problems with twins/DNA thieves