A Reference Architecture for Biometric Template Protection based on Pseudo Identities