# The radio environment of each place.

> Location-based authentication: how Ironchip turns the radio environment of a place into an anonymous safe zone, with no GPS and no personal data.

URL: https://www.ironchip.com/en/location-intelligence

Location-based MFA · Location Intelligence


Each place has its own radio environment: the WiFi and mobile networks visible from that point, with their intensity and relationship to each other. That pattern of waves is as distinctive as a fingerprint, and it's what Ironchip learns. The fingerprint is neither coordinates nor personal data. GPS is one more signal, which the engine checks against it and detects even when it is spoofed. Ironchip location-based MFA is built on that fingerprint.

[Request a demo](https://www.ironchip.com/en/talk-sales) What the device listens to

**2G to 5G** visible cell towers and their operator

**WiFi** surrounding networks and favorite network

**GPS and IP** only as contrast

**Latency** network response times

**ISP and SIM** provider and SIM actually in use

**VPN, TOR, proxy** attempts to spoof the origin

## Same point, always the same signals.

The device listens to the surrounding spectrum every time the user operates. An attacker can steal a password, clone a SIM, or spoof coordinates, but cannot reproduce the entire electromagnetic environment of a specific office.

### 1. Capture
On each operation the SDK measures the visible spectrum: cell towers, WiFi, GPS, IP, latencies, and ISP. Capture is passive and transparent to the user.
### 2. Signature modeling
Our technology groups the repeated captures of the same spot and condenses them into an anonymous signature, with no coordinates and no personal data.
### 3. Comparison on each access
Each new access generates its own capture and is measured against the stored signature. If they're similar enough, the location factor is satisfied; if not, the access does not pass.
### 4. Continuous learning
The system learns each user's usual places and detects geographic anomalies, overcoming the limitation of static zones.

## What the device listens to.

None of these signals identifies the user on their own. It's their combination and how it varies that describes a place.

**Mobile networks**: Visible 2G, 3G, 4G, and 5G cell towers and their operator.

**Surrounding WiFi**: Surrounding networks and the user's favorite WiFi network.

**GPS and IP**: As contrast signals, never as sole proof.

**Network latencies**: Geolocation based on response times.

**ISP and native SIM**: Contracted provider and SIM actually in use.

**Spoofing**: Use of VPN, TOR, or residential proxy to spoof the origin.

## A safe zone is not a point on a map.

It's a unique, usual place for each user, and very hard to forge. The common confusion is thinking we're talking about geolocation: we don't track anyone.

### It is

An anonymous signature of the radio environment, linked to the device's key.

A factor that detects spoofing, VPN, TOR, virtual SIMs, and impossible travel.

### It is not

GPS coordinates or a history of the user's movements.

Personal information: a street or address cannot be deduced from the signature.

## The same signature across every product.

[Identity and access The safe zone is declared as policy: head offices, plants, or remote work homes. A valid credential outside the zone is blocked. See the platform](https://www.ironchip.com/en/identity-platform) [Fraud detection The zone self-learns from customer behavior, and each operation is scored against it in real time. See the platform](https://www.ironchip.com/en/fraud-platform) [Privileged access Administration sessions only open from authorized places to administer. See the platform](https://www.ironchip.com/en/privileged-access) [Phishing Shield When the user clicks and MFA isn't enough, browser protection stops credential and session theft. See the solution](https://www.ironchip.com/en/phishing-shield)

## Frequently asked questions about the technology

### What is location-based authentication?

It means using the place you sign in from as an additional factor. Ironchip does not depend on coordinates: it compares the radio signature of the environment, formed by the visible mobile and WiFi networks, with that of the authorized zones. GPS is one more signal, and the engine detects when it is spoofed.

### Does it work inside buildings, where GPS does not reach?

Yes. The signature is based on mobile and wifi network signals, which are present indoors. GPS is used only as a contrast.

### Can it be fooled with a VPN or fake GPS?

It's very difficult. To spoof a place you would need to reproduce its complete electromagnetic environment. Additionally, the engine detects spoofed GPS, VPNs, TOR, proxies, and inconsistencies between the IP, SIM, and the place signature.

### What data is saved about the place?

An anonymous radio signature of the environment, linked to the device key. No addresses or movement history are saved, and the signature cannot be converted to a specific location.

## See how a safe zone is generated with your own users.

We show you what the signature of your offices looks like, measured with your own devices.

[Request a demo](https://www.ironchip.com/en/talk-sales) [Technical documentation](https://docs.ironchip.com)