ZK-SenseLM: Verifiable Large-Model Wireless Sensing with Selective Abstention and Zero-Knowledge Attestation
Hasan Akgul, Mari Eplik, Javier Rojas, Aina Binti Abdullah, Pieter van der Merwe
TL;DR
ZK-SenseLM integrates a robust RF/CSI encoder with a policy-grounded decision layer and end-to-end zero-knowledge proofs to yield auditable wireless sensing at the edge. The approach combines masked spectral modeling, phase-consistency regularization, and cross-modal alignment to produce uncertainty-aware decisions that can be verifiably tied to a registered model and bounded time window. A four-stage ZK proving pipeline (feature commitment, version/threshold binding, time-window binding, and decision correctness) enables compact proofs and fast verification, with micro-batching and gateway offloading reducing prover load. Federated and DP-enabled training maintain privacy without weakening verifiability, and a selective abstention mechanism allows safe operation under distribution shift. Across HAR, presence/intrusion, respiration proxies, and RF fingerprinting tasks, ZK-SenseLM demonstrates strong utility and calibration, robustness to perturbations, effective open-set handling, and practical verifiability costs suitable for edge deployments and audits. The work advances practical, privacy-preserving, and accountable wireless sensing by marrying robust RF representations with formal cryptographic guarantees and zero-trust control.
Abstract
ZK-SenseLM is a secure and auditable wireless sensing framework that pairs a large-model encoder for Wi-Fi channel state information (and optionally mmWave radar or RFID) with a policy-grounded decision layer and end-to-end zero-knowledge proofs of inference. The encoder uses masked spectral pretraining with phase-consistency regularization, plus a light cross-modal alignment that ties RF features to compact, human-interpretable policy tokens. To reduce unsafe actions under distribution shift, we add a calibrated selective-abstention head; the chosen risk-coverage operating point is registered and bound into the proof. We implement a four-stage proving pipeline: (C1) feature sanity and commitment, (C2) threshold and version binding, (C3) time-window binding, and (C4) PLONK-style proofs that the quantized network, given the committed window, produced the logged action and confidence. Micro-batched proving amortizes cost across adjacent windows, and a gateway option offloads proofs from low-power devices. The system integrates with differentially private federated learning and on-device personalization without weakening verifiability: model hashes and the registered threshold are part of each public statement. Across activity, presence or intrusion, respiratory proxy, and RF fingerprinting tasks, ZK-SenseLM improves macro-F1 and calibration, yields favorable coverage-risk curves under perturbations, and rejects tamper and replay with compact proofs and fast verification.
