The Defense Advanced Research Projects Agency (DARPA) is seeking proposals for the Multi-factor Continuous Authentication for Wearable Defense Equipment (MCAWDE) initiative, which aims to develop innovative, continuous multi-factor authentication solutions for lightweight, low-power Internet-of-Things (IoT) devices, particularly in defense applications. The initiative specifically invites Direct to Phase 2 (DP2) proposals that demonstrate feasibility through existing prototypes and technical assessments, focusing on real-time authentication techniques that utilize various sensor data, such as gait and heart rate, while minimizing user interaction and enhancing privacy. This project addresses the critical cybersecurity vulnerabilities associated with IoT devices and aims to fortify defenses for both government and commercial sectors. Proposals are due by January 8, 2025, with further details available on the DoD SBIR website.

## Description

Internet-of-Things (IoT) devices have seen unprecedented growth [1] and yet remain one of the weakest links when it comes to cybersecurity [2]. User and device authentication for battery-operated IoT devices (e.g., smartphones and wearables) is challenging due to limitations on the available energy, user interface, and processing power [3]. Over the last few years, multiple authentication techniques have been developed to address these challenges, for example, location-based authentication techniques [4] and gait-based authentication techniques [5]. However, existing techniques face challenges in terms of performance overhead, power consumption, and overall efficiency of cryptographic operations [6]. To address these challenges, DARPA seeks novel, continuous [7], multi-factor authentication [8] solutions for small weight and power devices. 

## Objective

The goal of Multi-factor Continuous Authentication for Wearable Defense Equipment (MCAWDE) topic is to develop and demonstrate novel, continuous, multi-factor authentication solutions for small weight and power devices.

## Phase I

The MCAWDE SBIR topic is soliciting Direct to Phase 2 (DP2) proposals only, which must include supporting documentation of Phase I feasibility. Phase I feasibility must be demonstrated through evidence of: a completed proof of concept/principal or basic prototype; definition and characterization of properties/capabilities desirable for DoD/government and civilian/commercial use; and capability/performance comparisons with existing state-of-the-art technologies/methodologies (competing approaches). Entities interested in submitting a DP2 proposal must provide documentation to substantiate that the scientific/technical merit and feasibility described above has been achieved and describe the potential commercial applications. DP2 Phase I feasibility documentation should include, at a minimum: <ul><li>&emsp;technical reports describing results and conclusions of existing work, particularly regarding the commercial opportunity or DoD insertion opportunity, risks/mitigations, and technology assessments</li><li>&emsp;presentation materials and/or white papers/technical papers </li><li>&emsp;test and measurement data</li><li>&emsp;prototype designs/models</li><li>&emsp;performance projections, goals, or results in various use cases; and, </li><li>&emsp;documentation of related topics such as how the proposed MCAWDE solution can enable multi-factor continuous authentication for wearable defense equipment </li></ul>The collection of Phase I feasibility material will verify mastery of the required content for DP2 consideration. DP2 proposers must also demonstrate knowledge, skills, and abilities in the technical areas of software engineering, cyber security, privacy, analytics, and machine learning. For detailed information on DP2 requirements and eligibility, please refer to the DoD Broad Agency Announcement and the DARPA Instructions for this topic. 

## Phase II

The goal of MCAWDE is to develop and demonstrate novel, continuous, multi-factor authentication solutions for small weight and power devices. MCAWDE continuous, multi-factor authentication techniques should employ lightweight device sensors to enable robust and efficient user and device authentication. Notional proposed techniques could incorporate gait signals (captured from inertial sensors such as accelerometers and gyroscopes), heart rate sensors, and stress levels based on galvanic skin response [9, 10] to name a few. Ideally, the chosen device sensors should be relevant to or easily extensible to current devices that a warfighter might use, e.g., see [11]. Proposals are encouraged to employ multiple sensing modalities to achieve robust authentication. Because there is a clear trade-off between the frequency of sensor readings, and power and processing overhead, any proposed solutions should require little to no user interaction for authentication. Moreover, any proposed solutions should operate in real-time and allow for privacy considerations. DP2 proposals should: <ul><li>&emsp;describe a proposed framework design/architecture to achieve the above stated goals </li><li>&emsp;present a plan for maturation of the framework to a demonstrable prototype; and, </li><li>&emsp;detail a test plan, complete with proposed quantitative metrics for the prototype performance </li></ul>Phase II will culminate in a prototype demonstration using one or more compelling use cases consistent with commercial opportunities and/or insertion into a DARPA program, for example, the Open Programmable Secure 5G (OPS-5G) program [12], which aims, in part, to develop techniques and security architectures enabling security at scale across devices with widely disparate size, weight, and power. The Phase II Option period will further mature the technology for insertion into a DoD Acquisition Program, another Federal agency, or commercialization into the private sector. The below schedule of milestones and deliverables is provided to establish expectations and desired results/end products for the Phase II and Phase II Option period efforts. Schedule/Milestones/Deliverables: Proposers will execute the research and development (R&amp;D) plan as described in their proposals, including the below: proposers that anticipate involving Human Subjects Research (HSR) must comply with the approval procedures detailed at http://www.darpa.mil/work-with-us/additional-baa. Proposers planning to use HSR are highly encouraged to clearly segregate research tasks from human testing tasks to allow for partial funding while internal and DoD approvals are obtained. <ul><li>&emsp;Every 3 months: Quarterly technical progress reports detailing: technical progress to date, tasks accomplished, risks/mitigations, a technical plan for the remainder of Phase II (while this would normally report progress against the plan detailed in the proposal, it is understood that scientific discoveries, competition, and regulatory changes may all have impacts on the planned work and DARPA must be made aware of any revisions that result), planned activities, trip summaries, any potential issues or problem areas that require the attention of the DARPA PM, and updates on (if applicable) Institutional Review Board and Human Research Protection Office approvals or subject enrollment when approvals are obtained. </li><li>&emsp;Every 6 months: Technical progress briefings to the DARPA PM (these briefings may take place as part of the OPS-5G program Principal Investigator meetings). </li><li>&emsp;Month 24: Final architecture with documented details; a demonstration of the ability for continuous, multi-factor authentication of wearable defense equipment; documented application programming interfaces; and any other necessary documentation (e.g., commercialization plan). </li><li>&emsp;Month 29 (Phase II Option period): Interim report of matured prototype performance against existing state-of-the-art technologies, documenting key technical gaps towards productization. </li><li>&emsp;Month 34 (Phase II Option period): Final Phase II Option period technical report including prototype performance against existing state-of-the-art technologies, including quantitative metrics for assessment. </li></ul>

## Phase III: Dual Use Applications

MCAWDE has potential applications across the DoD/government and commercially. For DoD/government, successful MCAWDE approaches are well-suited for integration into warfighter wearable devices, such as smartwatches, and tactical defense equipment. MCAWDE has the same applicability for the commercial sector. Phase III refers to work that derives from, extends, or completes an effort made under prior SBIR funding agreements, but is funded by sources other than the SBIR Program. The Phase III work will be oriented towards transition and commercialization of the developed MCAWDE technologies. For Phase III, the proposer is required to obtain funding from either the private sector, a non-SBIR Government source, or both, to develop the prototype into a viable product or non-R&amp;D service for sale in government or private sector markets. MCAWDE solutions will support national efforts to help secure government, commercial, and personal IoT devices. Results of MCAWDE are intended to improve understanding of the risks associated with the large threat surface created by IoT devices, across government and industry.

1730942902175.pdf

The Multi-factor Continuous Authentication for Wearable Defense Equipment (MCAWDE) initiative, led by DARPA, aims to develop innovative authentication solutions for lightweight, low-power IoT devices, particularly wearables used in defense applications. The project highlights the growing cybersecurity vulnerabilities associated with IoT devices and seeks to address the challenges posed by energy and performance limitations in previous authentication methods. Proposals are invited for Direct to Phase 2 (DP2), requiring evidence of feasibility, including prototypes and technical assessments.

Phase II focuses on creating real-time, multi-factor authentication techniques utilizing various sensor data (e.g., gait, heart rate), aiming for minimal user interaction and improved privacy. Key milestones include quarterly progress reports, a final architecture proposal, and prototype demonstrations. Successful outcomes are envisioned for integration into military wearables and commercial devices, with Phase III leading to market-ready products. Overall, MCAWDE seeks to enhance security across IoT devices, fortifying defenses for government and private sectors alike.

Topic

Agency

Program

Topic Link

Additional Information