In this paper, we propose a secure biometric recognition system that guarantees user privacy and revocable templates. The data stored in the system database reveals no information about the original biometric features and it is practically impossible to recover them from the stored data. Revocability is ensured by generating different templates for the same user, using the same biometric data, just by changing a parameter in the secure template scheme. To achieve this goal, a combination of an error correcting code and a hash function is used. The recognition performance of the proposed system is not significantly affected when compared to the same system without template security. The estimated number of security bits is around 400.