Two-Way Authentication Over Wireless Channels: Artificial Noise Turns the Impersonator's Extra Antennas Into a Liability

A physical-layer authentication scheme where both parties inject noise, making multi-antenna impersonation provably harder than one-way methods allow.

Imagine you're trying to verify a friend's identity over a noisy phone line. In one-way authentication, you ask a question and check the answer — but a clever eavesdropper who recorded enough past calls could fake the response. Now imagine a two-way version: you embed a secret hum in your question that only you know, and your friend mixes that hum into their answer along with their own secret static. An impersonator hears a garbled version of your hum and can't reconstruct the precise mixture your friend would produce. That's the structural move here: both parties contribute unpredictable noise that compounds the impersonator's uncertainty. The committed claim: for quasi-static Gaussian MIMO channels with TDD reciprocity, a two-way challenge-response protocol using artificial noise (AN) at both ends yields lower worst-case missed-detection probability than standard one-way physical-layer authentication — even against a multi-antenna adversary (Trudy) who can replace the challenge, the response, or both. This isn't the first paper to use AN in physical-layer auth, but the two-way structure with derived bounds against all three attack modes is the new contribution. The protocol works as follows. Bob sends a challenge laced with artificial noise. Alice receives it, adds her own spatial AN, and forwards a mixture back. Because Bob knows his own AN, he can predict the expected response from a trusted preparation phase. Trudy, however, sees only a noisy version of the challenge and has Alice's AN interfering with her reception during preparation. The key insight is that impersonation requires Trudy to match Bob's fresh randomness — not just mimic a static channel fingerprint — and the two-way AN injection makes that exponentially harder as the noise dimensions grow. The architecture sits squarely in the information-theoretic physical-layer security family, drawing on Maurer's secret-key agreement framework. The channel model is quasi-static Gaussian MIMO with TDD reciprocity — standard in the 5G/6G literature. The derivations assume attack-free initial training and preparation, which is the honest but load-bearing assumption. The math accounts for estimation error and AN leakage, which is where many prior AN-based schemes hand-wave. Integrity is mixed. The validation is entirely analytical — closed-form missed-detection bounds, not simulation or experiment. The bounds are derived under the Gaussian MIMO model, which is idealized. There's a single figure in 18 pages, suggesting the focus is on proof machinery rather than empirical demonstration. No code, no simulation data, no experimental testbed. The baseline comparison is against "specified one-way tests with/without AN," which is the correct family but lacks named prior-art numbers — the paper shows scenarios where two-way wins, but doesn't quantify the gap against the strongest published one-way scheme by name. The milestone question is where physical-layer auth stands relative to deployment. Current 5G systems use cryptographic authentication exclusively. Physical-layer auth remains a theory-stage complement. The practical unlock would be a hardware demonstration showing the two-way AN protocol running on a real MIMO testbed with measured missed-detection rates matching the bounds. That hasn't happened here and is likely 3-5 years away for any physical-layer auth scheme. The obvious missing experiment is simulation under realistic channel conditions — frequency-selective fading, imperfect TDD calibration, Trudy with more antennas than Alice or Bob. The paper restricts to equal antenna counts at all nodes, which is the tractable case but not the threatening one. My read: the authors are saving the unequal-antenna and simulation results for follow-on work (submitted to IEEE ICC 2027, so this is a conference-length first cut). The gap between analytical bounds and real-world performance is where the next paper lives.