Each Orb has a private signing key that's generated + stored inside a secure element. For more info, search for "secure element" in the following sections of the whitepaper:

https://whitepaper.worldcoin.org/technical-implementation

https://whitepaper.worldcoin.org/advancing-decentralization#...