WiFi is inherently vulnerable to eavesdropping because RF signals may penetrate many physical boundaries, such as walls and floors. LiFi, by contrast, is an optical method confined to line-of-sight and blocked by opaque surfaces. We present LightGuard, a dual-link architecture built on this insight: cryptographic key establishment can be offloaded from WiFi to a physically confined LiFi channel to mitigate the risk of key exposure over RF. LightGuard derives session keys over a LiFi link and installs them on the WiFi interface, ensuring cryptographic material never traverses the open RF medium. A prototype with off-the-shelf WiFi NICs and our LiFi transceiver frontend validates the design.
@article{arxiv.2604.01092,
title = {LightGuard: Transparent WiFi Security via Physical-Layer LiFi Key Bootstrapping},
author = {Shiqi Xu and Yuyang Du and Mingyue Zhang and Hongwei Cui and Soung Chang Liew},
journal= {arXiv preprint arXiv:2604.01092},
year = {2026}
}