It’s basically the openSSL key pair generator process
Generate a private public key pair
Set a password to protect the key pair
Write the public key to share NFC and keep the private key in a safe place.
Whenever a user wants to access the public key to decode a message , it will be prompted for a password to use the public key and decode the message you wrote with private key.