Do you know of any identity systems, where identity are controlled by the actual user (not just credential holder), but don't allow any third parties (malicious but trusted notaries, like governments) to hijack or deny it?

I've had a discussion about this, admitted that credentials and identities are different matters, but were unable to remember or think of any sane solution to this problem. :(

If you know of any — please share!