Abstract
This paper describes a method for forensic characterization of RF devices using two-tone probe signals. When transmitted to an RF device, the two-tone signal is affected by nonlinear circuit components such as amplifiers or diodes. The nonlinear components cause intermodulation distortion to the input signal, which is reradiated by the device. Features of the intermodulation distortion products are used to construct a device fingerprint. The fingerprint is then used to characterize the device so that it can be identified from other RF devices.