KAVI: Keyless Adaptive Verification through Identity — A Novel Authentication Protocol Using Prediction Residuals, Ephemeral Cryptographic Keys, and Three-Way Temporal Binding
Abstract
We present KAVI (Keyless Adaptive Verification through Identity), a novel authentication and data-protection protocol that eliminates passwords, passkeys, and stored credentials entirely. KAVI introduces three novel cryptographic primitives: (1) Surprise Signature — identity derived from AI prediction residuals rather than behavioral signals, creating an identity that strengthens as AI improves; (2) Ghost Key Architecture — zero-storage ephemeral encryption where keys are generated from behavior in real-time, used once, and immediately destroyed with no helper data stored; (3) Trinity Binding — three-way cryptographic binding of user identity, data context, and temporal context into a single key derivation, making replay attacks structurally impossible. KAVI also introduces a Guardian Recovery Network based on Shamir Secret Sharing (3-of-5 threshold) for device recovery. A working prototype (Secure Notes application) demonstrates practical viability using Next.js, TypeScript, TensorFlow.js, and the Web Crypto API.
Fields of Study & Subjects
User Authentication and Security Systems
Advanced Authentication Protocols Security
Cryptography and Data Security
Publication details
- Journal / source
- Zenodo (CERN European Organization for Nuclear Research)
- Publication date
- 15 February 2026
- Language
- EN
- Document type
- Preprint