In this work, we study incrementally designed secure biometric identification and authentication systems, in which a new system is designed based on an existing legacy system. By taking privacy and secrecy into consideration, we characterize the fundamental trade-offs among the identification rate, secret key rates, and privacy leakage rate.