ESEN
Request a demoDemo

Location-based MFA · Location Intelligence

The radio environment of each place.

Each place has its own radio environment: the WiFi and mobile networks visible from that point, with their intensity and relationship to each other. That pattern of waves is as distinctive as a fingerprint, and it's what Ironchip learns. The fingerprint is neither coordinates nor personal data. GPS is one more signal, which the engine checks against it and detects even when it is spoofed. Ironchip location-based MFA is built on that fingerprint.

Request a demo What the device listens to
2G to 5Gvisible cell towers and their operator
WiFisurrounding networks and favorite network
GPS and IPonly as contrast
Latencynetwork response times
ISP and SIMprovider and SIM actually in use
VPN, TOR, proxyattempts to spoof the origin

Same point, always the same signals.

The device listens to the surrounding spectrum every time the user operates. An attacker can steal a password, clone a SIM, or spoof coordinates, but cannot reproduce the entire electromagnetic environment of a specific office.

01Every access starts with a reading of the environment.

02Repeated readings are condensed into the signature.

03The new capture is compared with the stored signature.

04Usual places are learned; new ones are flagged.

  1. 01

    Capture

    On each operation the SDK measures the visible spectrum: cell towers, WiFi, GPS, IP, latencies, and ISP. Capture is passive and transparent to the user.

  2. 02

    Signature modeling

    Our technology groups the repeated captures of the same spot and condenses them into an anonymous signature, with no coordinates and no personal data.

  3. 03

    Comparison on each access

    Each new access generates its own capture and is measured against the stored signature. If they're similar enough, the location factor is satisfied; if not, the access does not pass.

  4. 04

    Continuous learning

    The system learns each user's usual places and detects geographic anomalies, overcoming the limitation of static zones.

What the device listens to.

None of these signals identifies the user on their own. It's their combination and how it varies that describes a place.

Mobile networksVisible 2G, 3G, 4G, and 5G cell towers and their operator.
Surrounding WiFiSurrounding networks and the user's favorite WiFi network.
GPS and IPAs contrast signals, never as sole proof.
Network latenciesGeolocation based on response times.
ISP and native SIMContracted provider and SIM actually in use.
SpoofingUse of VPN, TOR, or residential proxy to spoof the origin.

A safe zone is not a point on a map.

It's a unique, usual place for each user, and very hard to forge. The common confusion is thinking we're talking about geolocation: we don't track anyone.

It is

An anonymous signature of the radio environment, linked to the device's key.

A factor that detects spoofing, VPN, TOR, virtual SIMs, and impossible travel.

It is not

GPS coordinates or a history of the user's movements.

Personal information: a street or address cannot be deduced from the signature.

The same signature across every product.

Identity and access

The safe zone is declared as policy: head offices, plants, or remote work homes. A valid credential outside the zone is blocked.

See the platform

Fraud detection

The zone self-learns from customer behavior, and each operation is scored against it in real time.

See the platform

Privileged access

Administration sessions only open from authorized places to administer.

See the platform

Phishing Shield

When the user clicks and MFA isn't enough, browser protection stops credential and session theft.

See the solution

Frequently asked questions about the technology

What is location-based authentication?

It means using the place you sign in from as an additional factor. Ironchip does not depend on coordinates: it compares the radio signature of the environment, formed by the visible mobile and WiFi networks, with that of the authorized zones. GPS is one more signal, and the engine detects when it is spoofed.

Does it work inside buildings, where GPS does not reach?

Yes. The signature is based on mobile and wifi network signals, which are present indoors. GPS is used only as a contrast.

Can it be fooled with a VPN or fake GPS?

It's very difficult. To spoof a place you would need to reproduce its complete electromagnetic environment. Additionally, the engine detects spoofed GPS, VPNs, TOR, proxies, and inconsistencies between the IP, SIM, and the place signature.

What data is saved about the place?

An anonymous radio signature of the environment, linked to the device key. No addresses or movement history are saved, and the signature cannot be converted to a specific location.

See how a safe zone is generated with your own users.

We show you what the signature of your offices looks like, measured with your own devices.

Request a demo Technical documentation

Where the signature is used

Identity and accessAs an authentication factorA valid credential outside its place does not open. Fraud detectionAs a risk signalThe operation that arrives from where the customer never operated is held. Privileged accessAs a condition to administerOutside the data center or head office, there is no administration session.