Anomalous behavior detection using radio frequency fingerprints and access credentials

摘要

Electromagnetic (EM)/radio frequency (RF) emissions may be detected and corresponding EM personas may be created. One or more EM personas may be associated with a super persona corresponding to a particular entity. EM personas, super personas, and/or supplemental identifying information can be used to enforce security protocols.

主权项

1. A system, comprising:
a transceiver; at least one memory that stores computer-executable instructions; and at least one processor operationally coupled to the transceiver and the at least one memory, wherein the at least one processor is configured to access the at least one memory and execute the computer-executable instructions to:
receive a radio frequency (RF) fingerprint of an RF signal detected by the transceiver within an area under surveillance (AUS), the RF fingerprint comprising at least one of: i) a hardware address of an electronic device that emitted the RF signal or ii) a radio type identifier of a radio of the electronic device;determine a stored persona that includes a stored RF fingerprint that matches the received RF fingerprint;determine that the electronic device that emitted the RF signal is associated with the stored persona and identify a user associated with the stored persona;identify, from the stored persona, access credentials of the user, wherein the access credentials provide access to one or more ingress points of the AUS via one or more access control devices;receive access control information indicating that the access credentials have not been received at any of the one or more access control devices; anddetermine that the user is in violation of a security protocol based at least in part on receipt of the RF fingerprint and receipt of the access control information indicating that the access credentials have not been received.