Secure session
STS/key context and ranging parameters are established over an authenticated out-of-band connection.
High Assurance
Measure proximity. Bind the transaction to the user. Never downgrade assurance.
High Assurance combines secure UWB distance evidence with operating-system user verification in the same attempt.
UWBSecure ranging
STSProtected session
1:1Attempt-bound approval
ØNo silent downgrade
Distance evidence
Not just a distance value: a secure ranging transcript bound to the transaction.
The UWB session is cryptographically bound to the credential, attempt, gateway, and entry point. The server produces a High Assurance decision only with accepted distance evidence and current calibration policy.
Distance policy
Distance zone, direction of approach, dwell time, and adjacent-door behavior are defined per entry point.
Physical acceptance
Non-line-of-sight conditions, relay, distance reduction, and false-acceptance tests are run per model and version.
User approval
The user approves the transaction without biometric data ever reaching MesaiGo.
The iOS or Android local authentication screen permits use of the transaction key. MesaiGo receives no face, fingerprint, or biometric template; it verifies only that the signing operation was approved on-device.
Every attempt
There is no cached approval or grace period that unlocks multiple attempts.
Stays on-device
PIN and biometric data never leave the operating system security boundary.
Fail-closed
Without UWB or user verification, the profile does not silently fall back to Standard.
Create an evidence policy for your critical space.
Let us evaluate distance, user approval, two-person rules, and physical passage evidence together.