Recent advancements in WiFi technology have unveiled a groundbreaking method that can identify individuals with remarkable precision. Professor Thorsten Strufe from KASTEL, the Institute of Information Security and Dependability at KIT, explains that by analyzing the propagation of radio waves, researchers can generate images of both the environment and the people within it. Unlike traditional cameras that rely on light waves, this innovative approach utilizes radio waves, making personal devices unnecessary for detection.
Even if you turn off your smartphone, detection remains possible. The researchers highlight that nearby wireless devices connected to the network continue to emit sufficient signal activity to facilitate identification.
Transforming Routers into Discreet Monitoring Systems
The implications of this technology are significant, as it could convert ordinary routers into subtle surveillance systems that operate unnoticed. Julian Todt from KASTEL warns, "Every router could become a potential surveillance tool. If you frequently pass by a café with WiFi, you might be recognized there without your awareness, potentially by authorities or businesses."
Felix Morsbach, another researcher, notes that while intelligence agencies and cybercriminals have various methods for monitoring individuals, such as hacked cameras, WiFi networks present a unique challenge due to their ubiquitous and inconspicuous nature.
"These wireless networks could evolve into a nearly all-encompassing surveillance infrastructure, possessing one alarming characteristic: they are invisible and raise no suspicion," he adds.
This technology's reach is extensive, as wireless networks are prevalent in homes, offices, restaurants, airports, and public areas worldwide.
No Specialized Equipment Required
What sets this method apart is that it does not require specialized or costly sensors. Instead, it functions with standard WiFi hardware commonly found in most homes and businesses. Previous systems relied on complex channel state information (CSI) to track radio signals, whereas this new technique capitalizes on the routine communication between WiFi routers and their connected devices.
Devices on a network routinely send feedback data, known as beamforming feedback information (BFI), to the router. This unencrypted data can be accessed by anyone within range, allowing researchers to utilize signal reflections to create multiple "views" of individuals, enabling AI systems to learn and recognize unique identities.
Once the machine learning model is trained, the identification process reportedly takes mere seconds.
Privacy Implications of Near Perfect Accuracy
In trials involving 197 participants, the system achieved nearly 100% accuracy in identifying individuals, regardless of their movement or viewing angle. Strufe emphasizes, "While this technology is powerful, it poses risks to our fundamental rights, particularly regarding privacy."
The researchers express concern about potential misuse in authoritarian regimes, where it could be used to track citizens or monitor dissent. They advocate for enhanced privacy protections to be integrated into the upcoming IEEE 802.11bf WiFi standard.
The project received funding under the Helmholtz "Engineering Secure Systems" initiative, and the findings will be presented at the "ACM Conference on Computer and Communications Security" (CCS) in Taipei.
