Continuous authentication for frontline workers
Continuous authentication confirms who is at a device for the whole session, not just at login. For frontline workers on shared devices, the session belongs to whoever is present now. The Crayonic Badge does this with a security-first wearable: the worker unlocks it once with a PIN or fingerprint, on-body detection and motion monitoring keep confirming the same person is wearing it, and the workstation locks the moment they walk away.
Book a Demo
Why frontline work needs it
Frontline staff share workstations, carts and kiosks. A login at 07:00 says nothing about who is at the keyboard at 07:20. Long timeouts leave sessions open, short ones get defeated with workarounds, and the audit trail ends up naming the wrong person.
NIS2 Article 21 names it directly: essential and important entities must use “multi-factor authentication or continuous authentication solutions”.
Three ways to do continuous authentication
| Approach | How it confirms presence | Trade-offs on the frontline |
|---|---|---|
| Camera presence and face recognition | A camera checks whether the user is still at the screen | Needs a camera at every device. Masks, lighting and privacy rules apply, and the camera is not a FIDO2 credential. |
| Behavioral signals on the device | Typing and mouse patterns | Works only while the person uses keyboard and mouse. Weak on touch carts and kiosks. |
| Wearable presence (Crayonic Badge) | A certified device on the body, unlocked once, confirms its wearer continuously | One device per worker. No camera, works with gloves and masks, and the same device holds the FIDO2 credentials. |
How the Badge keeps authenticating
- Start of shift. PIN on the Badge’s own screen or fingerprint, checked inside the Badge. Nothing is typed into the PC.
- During the shift. The on-body sensor and continuous motion monitoring confirm it is still the same wearer.
- At each workstation. A Crayonic Bridge defines a presence zone. Entering it signs the worker in; leaving it locks the session.
- If anything changes. If the Badge is taken off or left on a desk, it locks and asks for a fingerprint or PIN again.
Where it fits
Hospitals
Wards, nurses’ stations, operating rooms.
Healthcare →Manufacturing
Shared HMIs, MES and ERP terminals.
Manufacturing →Defense and public sector
Offline-capable, no cloud dependency.
Defense →Comparing wearables and camera-based tools? See Crayonic vs OLOID vs Nymi.
Frequently asked questions
What is continuous authentication?
Checking identity throughout a session rather than once at login, so access ends when the verified person leaves.
Does NIS2 require continuous authentication?
NIS2 Article 21 requires "multi-factor authentication or continuous authentication solutions". The Crayonic Badge provides both: FIDO2 multi-factor authentication at unlock and continuous presence after.
Is it surveillance?
No. The Badge uses no cameras and records no behavior on the PC. It only confirms that its own wearer is present.
What if two workers stand at the same PC?
The session belongs to the Badge that signed in. Switching users means one walks away and the other walks up.
Does it work offline?
Yes. Presence and authentication run on the device and local infrastructure.
See it on your ward
Book a 30-minute demo, or ask for a pilot kit with Badges and Bridges for one unit.
Book a DemoExplore the Badge