British Telecommunications Public Limited Company

Max Smith-creasey

Fadi El-Moussa

Jonathan Roscoe

Tiago Martins Andrade

Tiago Andrade

Oliver Baxandall

The present disclosure relates to improving ways of making decisions made by, or with the assistance of, computing systems. One aspect relates to a computer-implemented continuous control method, the method comprising: obtaining a policy decision according to an application of a policy to an inference; the inference being of an authorised user's state of mind over a time interval, determined according to a plurality of biometric readings obtained passively from the user over the time interval for continuous authentication of the user; the user's identity having been continuously authenticated according to the plurality of biometric readings; and causing one or more actions in accordance with the policy decision. Further aspects relate to a data processing system comprising means for carrying out such a method, a computer program comprising instructions which, when the program is executed by a computer, cause the computer to carry out such a method, a computer-readable data carrier having stored thereon such a computer program and a data carrier signal carrying such a computer program.

Computer-implemented continuous control method, system and computer program

A computer implemented method to protect data input to a user input device from detection, the device including an artificial haptic feedback mechanism arranged to generate an occurrence of haptic feedback for sensing by a user of the device in response to each input gesture on the device by the user, wherein at least a subset of each occurrence of haptic feedback is adjusted with respect to a previous occurrence of haptic feedback by one or more of: a timing of the haptic feedback with respect to a time of occurrence of a corresponding input gesture; an adjustment to a duration of haptic feedback relative to a duration of the previous occurrence of haptic feedback; and a generation of one or more addition occurrences of haptic feedback.

Data interception protection

A method, computer system and non-transitory computer-readable storage medium are provided for validating a secure authentication token for accessing an application. The method captures a user gesture provided by a user as an authentication token and analyzes the gesture to evaluate a measure of complexity of the gesture. Responsive to a determination that the measure of complexity does not meet a minimum measure of complexity, repeating the capturing and analyzing steps until the gesture meets the defined measure of complexity. Then the user is requested to repeat the approved gesture and the repeated gesture is captured, and it is determined if the repeated gesture meets defined requirements for repeatability. Responsive to a determination that the repeated gesture does not meet the requirements for repeatability, the method is repeated; and, responsive to a determination that the repeated gesture does meet the requirements for repeatability, the gesture is validated as a secure authentication token.

Secure authentication token

A computer implemented method of controlling access by a requesting user to a restricted resource in an extended reality environment, the method comprising: permitting access, by the requesting user, to the restricted resource; monitoring characteristics of the requesting user during use of the restricted resource, the characteristics including one or more of biometric and behavioural information for the user accessing the resource; accessing a profile data store containing a plurality of profiles of users having accessed the restricted resource, each profile including at least one of biometric and behavioural information for a respective user accessing the resource; responsive to a determination that the characteristics of the requesting user corresponds to at least one profile, inhibiting access, by the requesting user, to the restricted resource.

Extended reality access control

A method, computer system and computer program are provided for achieving a secure authentication token for accessing an application. The method captures a user gesture provided by a user as an authentication token and analyses the gesture to evaluate a measure of complexity of the gesture. Responsive to a determination that the measure of complexity does not meet a minimum measure of complexity, an amendment is determined and proposed to the gesture to increase a complexity of the gesture. The capturing and analysing steps are repeated, and, responsive to a determination that the gesture meets the minimum measure of complexity, the gesture is approved as a secure authentication token.

The present disclosure relates to the security of user devices connected to local networks, such as devices comprised in the Internet of Things' (IoT). An aspect relates to a computer-implemented method of securing functionality of a user device connected to a local network provided at a premises, the method comprising: determining a premises trust score indicative of a likelihood that an authorised user of the user device is present at the premises, the determining being in dependence on: (i) data received from one or more biometric-capable devices, distinct from the user device, connected to the local network, that data being indicative of continuous biometric authentication of a current user of the respective biometric-capable device; or (ii) a lack thereof; then causing the user device to respond to a request for functionality made through a local user interface it comprises in a manner which depends on the premises trust score.

Growing community of inventors

London, United Kingdom

Max Smith-creasey