Patent Description:
Computer systems, including virtual reality (VR) systems, allow for remote execution of some actions, for example controlling a remote device such as a robot. A user can operate, from a first location, a remote device located at a second location by means of a link such as a communications network. In such a situation, there may be a need for a user to be positively authenticated in order to control the remote device. <CIT> discloses an access control method with neuro and neuro mechanical finterprints. <CIT> discloses a method and system for identifying client users from user behavioural data. <NPL> discloses biometric systems for identifying users. <CIT> discloses systems and methods to control an autonomous mobile robot.

In a first aspect, the specification describes an apparatus comprising: means for receiving a control signal from a user-operated control apparatus for controlling a remote apparatus, wherein the control signal is a composite signal comprising a command signal for controlling the remote apparatus and a user noise signal; means for extracting the user noise signal from the received control signal by subtracting from the control signal one or more known command signals for possible control actions of the remote apparatus; means for determining if the user noise signal meets one or more predetermined criteria; and means for authenticating a user of the control apparatus at least partially based on the user noise signal determination.

The apparatus may further comprise means for identifying a user from whom the control signal is received, and wherein determining if the user noise signal meets the predetermined criteria includes means for comparing the user noise signal with stored user noise signature data corresponding to the identified user.

The means for identifying the user may comprise means for receiving user-input prior to receiving the control signal.

The received user-input may comprise one or more of a password, fingerprint, or other biometric data.

The stored user noise signature data may indicate one or more user noise thresholds, and the user noise signal may be determined as meeting the criteria if the comparison indicates that the user noise signal is below or within the one or more user noise thresholds.

The stored user noise signature data may be a user noise learned model, generated using one or more prior training operations, for classifying whether or not the received user noise signal is below or within the one or more noise thresholds.

The apparatus may further comprise, prior to receiving the control signal, means for performing training to generate the user noise learned model, the training may comprise means for receiving from the user a plurality of control signals corresponding to operation of the remote apparatus, means for extracting a plurality of user noise signals corresponding to each training control signal, and means for generating the learned model iteratively at least partially based on the plurality of user noise signals.

The means for extracting the user noise signal from the control signal may comprise means for subtracting a command signal from the control signal, wherein the command signal is configured to control the remote apparatus.

The command signal may be a command signal learned model, generated using one or more prior training operations, for classifying whether or not the received command signal is below or within one or more command thresholds.

The apparatus may further comprise, prior to receiving the control signal, means for performing training to generate the command signal learned model, the training may comprise means for receiving from the user a plurality of control signals corresponding to operation of the remote apparatus, means for extracting a plurality of command signals corresponding to each training control signal, and means for generating the learned model iteratively at least partially based on the plurality of command signals.

The command signal may be determined by filtering out noise from the control signal.

The noise may include the user noise signal and a hardware noise signal, wherein the hardware noise signal corresponds to the control apparatus.

The predetermined criteria may be met at least partially based on the probability that the user noise signal is the same as a stored noise signature is above a predetermined threshold.

The authenticating may comprise means for authenticating the user of the control apparatus to enable operation of the apparatus by means of the control signal if the user noise signal meets the one or more predetermined criteria.

The authenticating may comprise means for preventing user operation of the apparatus by means of the control signal if the user noise signal does not meet the one or more predetermined criteria.

The apparatus may further comprise means for causing disabling of the remote apparatus until a reset event is performed.

The apparatus may further comprise means for causing an alarm to sound at the remote apparatus and/or at a remote computer terminal associated with the remote apparatus.

The determining and authenticating may be performed repeatedly, in substantial real-time, for the control signal received whilst the user is operating the control apparatus.

The remote apparatus may be a robot for being mechanically controlled by the control apparatus.

The robot may be performing a medical procedure.

In a second aspect, the specification describes a method, comprising: receiving a control signal from a user-operated control apparatus for controlling a remote apparatus, wherein the control signal is a composite signal comprising a command signal for controlling the remote apparatus and a user noise signal; extracting the user noise signal from the received control signal by subtracting from the control signal one or more known command signals for possible control actions of the remote apparatus; determining if the user noise signal meets one or more predetermined criteria; and authenticating a user of the control apparatus at least partially based on the user noise signal determination.

The method may further comprise identifying a user from whom the control signal is received, and wherein determining if the user noise signal meets the predetermined criteria includes comparing the user noise signal with stored user noise signature data corresponding to the identified user.

Identifying the user may comprise receiving user-input prior to receiving the control signal.

The stored user noise signature data may indicate one or more user noise thresholds, and wherein the user noise signal is determined as meeting the criteria if the comparison indicates that the user noise signal is below or within the one or more user noise thresholds.

The method may further comprise, prior to receiving the control signal, performing training to generate the user noise learned model, the training may comprise receiving from the user a plurality of control signals corresponding to operation of the remote apparatus, extracting a plurality of user noise signals corresponding to each training control signal, and generating the learned model iteratively at least partially based on the plurality of user noise signals.

Extracting the user noise signal from the control signal may comprise subtracting a command signal from the control signal, wherein the command signal is configured to control the remote apparatus.

The method may further comprise, prior to receiving the control signal, performing training to generate the command signal learned model, the training may comprise receiving from the user a plurality of control signals corresponding to operation of the remote apparatus, extracting a plurality of command signals corresponding to each training control signal, and generating the learned model iteratively at least partially based on the plurality of command signals.

The authenticating may comprise authenticating the user of the control apparatus to enable operation of the apparatus by means of the control signal if the user noise signal meets the one or more predetermined criteria.

The authenticating may comprise preventing user operation of the apparatus by means of the control signal if the user noise signal does not meet the one or more predetermined criteria.

The method may further comprise causing disabling of the remote apparatus until a reset event is performed.

The method may further comprise causing an alarm to sound at the remote apparatus and/or at a remote computer terminal associated with the remote apparatus.

The robot may be for performing a medical procedure.

In a third aspect, the specification describes an integrated circuit configured to perform any method as described with reference to the second aspect.

The integrated circuit may comprise an application-specific integrated circuit (ASIC).

In a fourth aspect, the specification describes a non-transitory computer-readable storage medium having stored thereon computer-readable code, which, when executed by at least one processor, causes the at least one processor to perform a method, comprising: receiving a control signal from a user-operated control apparatus for controlling a remote apparatus; extracting a user noise signal from the received control signal; determining if the user noise signal meets one or more predetermined criteria; and authenticating a user of the control apparatus at least partially based on the user noise signal determination.

In a fifth aspect, the specification describes an apparatus comprising: at least one processor; and at least one memory including computer program code which, when executed by the at least one processor, causes the apparatus: to receive a control signal from a user-operated control apparatus for controlling a remote apparatus; to extract a user noise signal from the received control signal; to determine if the user noise signal meets one or more predetermined criteria; and to authenticate a user of the control apparatus at least partially based on the user noise signal determination.

In a sixth aspect, the specification describes an apparatus, comprising: means for receiving a control signal from a user; and means for sending the control signal to an authentication apparatus for controlling the apparatus.

The apparatus may be a user-operated control apparatus.

The apparatus may be headset, for example a virtual reality or augmented reality headset.

In a seventh aspect, the specification describes an apparatus comprising: a means for receiving an control signal for controlling the apparatus.

The apparatus may be a remote device, for example a robot.

Example embodiments will now be described, by way of non-limiting example, with reference to the accompanying drawings, in which:.

Example embodiments relate to the remote controlling of devices, which includes machine or processor -based authentication of a user controlling a device remotely. In this context, authentication means checking if a user is a valid user and the result can be a positive one if the user is valid or a negative one if the user is not valid.

For example, a user may be located in a first location and a device that the user is required or wishes to operate may be located in a second location which is remote from the first location. The device may be an electro-mechanical device such as a robot for performing a particular task, such as in relation to manufacturing, providing a service and even performing a manual task which may be mission-critical or medically-related, e.g. remote surgery. However, embodiments are not necessarily limited to remote control of a robot.

A user may effect said remote control by means of operating a processing system, such as by means of any one of a computer, laptop, smartphone, tablet computer, digital assistant, smartwatch or virtual reality (VR) or augmented reality (AR) device. Whatever its form, the processing system may provide an input device such as one or more of a joystick, touch-sensitive pad, touch-sensitive screen, or virtualised input whereby one or more sensors or cameras may detect user movement and/or gestures in relation to a virtualised scene in order to generate control signals for transmission to the remote device under control. In general, example embodiments relate to remote control where some user movement is involved, for example hand or arm movement.

It will be appreciated that virtual reality systems provide an intuitive and effective way for users to feel immersed in a captured environment, for example in relation to a environment comprising a remote device. Virtual reality may, for example, involve capturing and transmitting to a user device video data, possibly accompanied by audio data, which is encoded with a spatial percept such that, when rendered at a virtual reality user device, the user feels visually immersed in a three-dimensional virtualised space. Movement of the virtual reality user device and/or associated input device(s) may permit three-dimensional movement (pitch, roll and yaw) of the user or part of their body in relation to the virtualised space to effect interactive control of a remote device. Further, some virtual reality systems may additionally detect translational movement of the user within the virtualised space to provide so-called six degrees of freedom (6D0F) interaction.

Typically, a virtual reality user device will be a headset or goggles worn by a user. The headset or goggles may comprise a plurality of screens. The headset or goggles may further comprise one or more headphones or speakers for transducing audio signals, if provided, to accompany the virtualised space that is presented through the screens. Sensors such as gyroscopes and accelerometers may be comprised within the headset or goggles for sensing and generating signals representative of user motion, such as pitch, roll, yaw and translational movement, if provided. In other examples, user motion is sensed by external sensors, such as by one or more cameras positioned in the real-world space in which the user is situated. In other examples, the user may carry one or more radio tags which, in association with one or more radio tag readers positioned in the real-world space, may determine the current position of the user. The headset or goggles may also carry one or more cameras for sensing a user's gaze direction.

Example embodiments assume the use of a virtual reality user device for controlling an electromechanical robot, through any suitable means where the controlling input is issued remotely. For example, the robot may be used for a mission-critical task, such as assembling or servicing complex machinery, operating within a hazardous environment and/or performing a medical procedure.

With these examples in mind, authentication of a proper controlling user is needed, for example to avoid intervention of an unauthorised other person part-way through controlling input to the robot or other remote device. For example, a proper user may have authenticated themselves using an initial method by means of identifying themselves with an entered username or radio tag or token, and may then have entered a password. Biometrics may be another source of initial authentication. However, if during controlling input the proper user is physically intimidated or struck, e.g. pushed, embodiments provide an advantageous way of detecting such conditions and taking appropriate action. Embodiments also protect against the user becoming unexpectedly incapacitated during operation.

As mentioned, methods for authenticating a proper user ordinarily take place before the user accesses control of the remote device. Generally, the user enters their credentials to access the device in order to be positively authenticated so that operation of the remote device is enabled. Once the operation of the remote device is enabled, further authentication is not usually required.

Example embodiments herein provide a continuous or substantially continuous authentication of a user whilst the device is being operated, which provides an additional layer of security over conventional authentication methods.

The various aspects will be described in detail with reference to the accompanying drawings. References made to particular examples and implementations are for illustrative purposes, and are not intended to limit the scope of protection.

<FIG> shows a system including a user <NUM>, a network <NUM> and a remote device <NUM>. The user <NUM> may receive from the network <NUM> (or another network) video data representing a video feed which may be of a virtualised space in which the remote device <NUM> is located or from a camera attached to the remote device. The video data is received at a processing device such as a computer, media player or the like which may render the video data into a three-dimensional virtualised space which is presented to the user through a virtual reality user device, such as a virtual reality headset (hereafter "headset") <NUM>. In some embodiments, the video data may be rendered by a rendering means of the headset <NUM> itself. The user <NUM> may also operate a handheld controller <NUM> in addition to the virtual reality headset <NUM>. Movement of the user's hand or arm may be sensed either by the virtual reality headset <NUM> and/or handheld controller <NUM> and fed-back to the video processing device for transmission over the network <NUM>. This movement may alter the video data that is received subsequently, to reflect motion of the user in relation to the remote device <NUM> and/or to reflect motion of the remote device as commanded by the user <NUM>. In embodiments herein, it is assumed that the user <NUM> remains largely static and it is inputs made to the handheld controller <NUM> that cause the remote device <NUM> to mechanically move to perform a task.

The <FIG> system may also comprise an authentication system <NUM> configured to authenticate (positively or negatively) the user <NUM> or other users in relation to operating the remote device <NUM>, in accordance with example embodiments. Although shown as a separate entity, remote from the remote device <NUM>, the authentication system <NUM> may be located anywhere and may communicate with the user <NUM> and the remote device <NUM> via the network <NUM>, or may be local to the user and/or remote device. The authentication system <NUM> may be provided in the cloud, for example. The authentication system <NUM> may comprise, or have access to, a memory <NUM> configured to store data associated with identifiable users. The stored data in said memory <NUM> may represent user noise signatures relating to their movement during one or more calibration or training operations, performed prior to normal operation.

The headset <NUM> provides virtual reality video and/or audio content to the user, e.g. through the use of a pair of video screens and/or headphones incorporated within the headset. A virtual space or virtual world is any computer-generated version of a space, for example a captured real world space, in which a user can be immersed through the headset <NUM>.

In example embodiments, the user <NUM> is immersed in a virtual space <NUM> that corresponds to the location of the remote device <NUM>. The remote device <NUM> may have one or more cameras 20A - 20C and/or other sensors to accurately depict a virtual world back to the headset <NUM>.

The network <NUM> may be any form of network. The network <NUM> may for example be an Internet Protocol (IP) network such as the Internet. Communication between the headset <NUM>, the handheld controller <NUM> and the remote device <NUM> over the network may be by wired or wireless means, such as by means of WiFi or similar, via appropriate gateways, routers and/or other intermediate nodes. Communication may involve radio networks, such as cellular communications networks using <NUM>, <NUM>, <NUM> or future mobile standards.

As the user <NUM> moves or operates the handheld controller <NUM>, the corresponding movements may be sent as, or converted into, data signals for receipt at the remote device <NUM>. In this way, the user <NUM> can remotely operate the remote device <NUM> in real-time or near real-time.

In an example embodiment, the remote device <NUM> is a robot. For example, the robot <NUM> may move mechanically in terms of one or more of translation, extension, rotation in the pitch, roll and yaw axes, and to perform open and shutting movements of a pair of jaws at a distal end of an arm. Each type of movement may be commanded by respective control commands which may be issued by the user <NUM> through the handheld controller <NUM> in any suitable form, whether as discrete commands resulting from respective hard or soft buttons and/or by means of joystick input and/or by means of touchscreen interaction.

As the user <NUM> operates the control device <NUM>, a control signal is periodically or continuously generated and transmitted to the remote device <NUM> via the network <NUM>, causing appropriate movement of the remote device.

The control signal will in practise comprise a composite signal made up of multiple signal components, namely a command signal and one or more noise signals.

<FIG> shows a graphical representation of the control signal <NUM> which results from operation of the handheld controller <NUM>. The command signal <NUM> is that component of the composite control signal <NUM> corresponding to the intended user input through the handheld controller <NUM>; in other words, the component used to provide the intentional instruction to control the remote device <NUM>. The user noise signal <NUM>, shown by a dashed line, is an additional signal component, unique to the user <NUM> and which may be extracted from the composite control signal <NUM> using suitable signal processing. The user noise signal <NUM> is not as a result of intentional commands but due to involuntary movements. Such signal processing may be based on filtering and/or subtracting known command signals for possible commanded control actions from the composite control signal <NUM> to leave only the user noise signal <NUM>. Other methods may be used.

The user noise signal <NUM> is therefore also generated by the user <NUM>. For example, the user noise signal <NUM> may be generated by tremors and/or shaking by the user <NUM> during normal operation of the handheld controller <NUM>. The user noise signal <NUM> may therefore be generated by unconscious movements by the user <NUM>, and does not specifically relate to intentional instructions to control the remote device <NUM>. The user noise signal <NUM> nevertheless represents a form of personal signature of the user, which signature is used herein for periodic or continuous authentication during control of the remote device <NUM>.

In an example embodiment, the composite control signal <NUM> can be modelled as follows: <MAT> where fx(t) is the composite control signal, traj(t) is the command signal <NUM> which will be used to operate and control the remote device <NUM>, and Eu(t) is the user noise signal <NUM>, which describes the user's unconscious movements such as tremors and/or shaking.

The above equation (<NUM>) may describe the control signal <NUM> over a single axis. The composite control signal <NUM> can also be modelled over three axes.

Since the user noise signal Eu(t) <NUM> will be unique to the user <NUM>, the user noise signal allows the authentication system <NUM> to continuously check that the user is authorised to operate that remote device <NUM>. This check gives the system an additional layer of security beyond the mere initial authentication based on, e.g. username and password or identity tag. The authorisation check may be continuously performed by the authentication system <NUM> whilst the remote device <NUM> is being operated to ensure that the user <NUM> is authorised to operate the remote device and is not experiencing adverse behaviour such as intimidation or external force, or has become incapacitated.

Prior to operation of the remote device <NUM>, a user noise signal Eu(t)T may be extracted and stored in the memory <NUM> of, or associated with, the authentication system <NUM>. This extracting may comprise part of a training or calibration operation. The user <NUM> may then be given authorisation to operate the remote device <NUM> and possibly other remote devices within a particular pool of devices, provided the subsequently-received control signal fx(t) <NUM> during operation comprises a user noise signal component Eu(t) <NUM> that meets certain conditions associated with the trained user noise signal Eu(t)T for that user.

For example, the trained user noise signal Eu(t)T may comprise signature data representing the stored user noise signal Eu(t) from a training or calibration operation. In this context, a signature is simply a data representation of a user's noise signal based on one or more prior training or calibration operations.

For example, the trained user noise signal Eu(t)T may provide signature data based on an aggregate or average of multiple user noise signals Eu(t) from the training or calibration operation.

For example, the trained user noise signal Eu(t)T may provide signature data based on a learned model obtained by known machine learning techniques, for example using a neural network, whereby the learned model is trained to classify a received user noise signal Eu(t) during operation into either a positive authentication or a negative authentication.

The trained user noise signal Eu(t)T is hereinafter referred to as a user noise signature, but it will be appreciated that it can be stored in any suitable form that represents expected user noise, and may be specific to the remote device <NUM> as well as being user specific.

For example, using any one or more of the above forms of trained user noise signature Eu(t)T, said signature may be converted into a modified signature by one or more processing operations so that it comprises less data than the originally captured user signature during the training or calibration operation. For example, the user noise signature may be reduced to comprise only key frequency components for comparison purposes and/or comprise thresholds defining boundary conditions within which the subsequently-received user noise signal component Eu(t) <NUM> should remain to result in a positive authentication.

When the user <NUM> wishes to operate the remote device <NUM>, they may first need to identify themselves to the authentication system <NUM>. This identification may be needed in order to locate the appropriate trained user noise signature Eu(t)T to access from the memory <NUM>. In use, the user noise signal Eu(t) <NUM> may be extracted from the control signal fx(t) <NUM> by filtering or subtraction, and is checked against the trained user noise signature Eu(t)T stored in the memory <NUM>. If the user noise signal Eu(t) <NUM> extracted from the control signal fx(t) <NUM> and the trained user noise signature Eu(t)T stored in the memory <NUM> meet one or more predetermined criteria, then positive authentication may result. Any one or more types of criteria may be set. For example, if the user noise signal Eu(t) <NUM> and the trained user noise signal Eu(t)T match and/or correlate to an acceptable level, a positive authentication may result and operation of the remote device <NUM> is enabled or permitted to continue.

In an example embodiment, the user noise signal Eu(t) <NUM> extracted from the control signal fx(t) <NUM> and the trained user noise signature Eu(t)T stored in the memory <NUM> are tested against one or more criteria based on the probability that the user and the trained user noise signal are the same. The probability that the user and the trained user noise signal are the same may be defined as: <MAT> where Pr[Eu(t)T(x(t),y(t),z(t)) = Eu(t)(x(t),y(t),z(t))] is the probability that that three dimensional co-ordinates x(t) , y(t) and z(t) of a user noise signal stored in memory is equal to the user noise signal extracted from the control signal. The product may be taken over a specific time period [t<NUM>, tN] over which the authentication is run. The time period may be a rolling time window for continuous or periodic authentication. If the probability is above a predetermined threshold, the a positive authentication may result.

In example embodiments, a positive authentication is achieved if the user noise signal Eu(t) <NUM> extracted from the control signal fx(t) <NUM> and the trained user noise signature Eu(t)T stored in the memory correlate to an acceptable level. This may be known as the integral case. The difference between the user noise signal Eu(t) <NUM> extracted from the control signal fx(t) <NUM> and the trained user noise signature Eu(t)T stored in the memory may be defined as: <MAT>.

The threshold may be defined as <MAT>, above which the delta is too high for the user currently operating the controller to be the user who is represented by user noise signature stored in the memory <NUM>. Therefore, a positive authentication occurs when: <MAT> and a negative authentication occurs when: <MAT>.

If the user noise signal Eu(t) extracted from the control signal fx(t) and the trained user noise signature Eu(t)T stored in the memory <NUM> do not match, or do not correlate to an acceptable level, then a negative authentication may result and the user <NUM> is prevented from operating the remote device <NUM>. In an embodiment, if the user <NUM> is prevented from operating the remote device <NUM>, the command signal traj(t) <NUM> is not sent to the remote device therefore ceasing its operation. In an example embodiment, the remote device <NUM> may be disabled until a reset event is performed. In an example embodiment, an alarm sound may be raised at the remote device <NUM> and/or at the handheld controller <NUM>.

As mentioned, in an embodiment, a stored user noise signature Eu(t)T in the memory <NUM> may indicate one or more user noise thresholds. If the user noise signature Eu(t) <NUM> is within the user noise signature thresholds, then the user may be positively authenticated to operate the remote device <NUM>. If the user noise signal Eu(t) <NUM> is not within the user noise signature thresholds, then the user may not be authenticated to operate the remote device <NUM>. This may result in the consequences mentioned above, namely disabling operation of the remote device <NUM>, possibly until a reset event is performed, and possibly raising an alarm.

As also mentioned, the user noise signature Eu(t)T may use a neural network to produce a learned model that is generated using one or more user prior training operations. The training operations may include receiving a plurality of training control signals from the user, and extracting a plurality of user noise signals from the plurality of control signals and generating the user noise learned model iteratively based on the plurality of user noise signals.

The command signal is a command signal learned model that is generated using one or more prior training operations. The training operations include receiving from the user a plurality of control signals corresponding to operation of the remote device, extracting a plurality of command signals and generating the command signal learned model iteratively based on the plurality of command signals.

In another example embodiment, the control signal can be modelled as follows. <MAT> where fx(t) is the control signal, Traj(t) is the command signal which will be used to operate and control the remote device, Eu(t) is the user noise signal, which describes the users unconscious movements such as tremors (as above) and Eh(t) is a hardware noise signal that is the specific noise associated with the handheld controller <NUM>. This example embodiment therefore may take into account other noise components that may be present in the control signal fx(t).

For some systems, the hardware noise signal Eh(t) can be measured at rest. In example embodiments, the hardware noise signal Eh(t) is an isotropic Gaussian noise, which may be assumed or measured.

The user noise signal Eu(t) is not a Gaussian process of the same parameter as the hardware noise signal Eh(t). Therefore, the Gaussian noise can be removed from the overall noise signal (user noise signal plus the hardware noise signal) Eu(t) + Eh(t) to leave only the user noise signal Eh(t). Otherwise, the process repeats as for the previous embodiment.

<FIG> is a flow diagram representing operations that may be performed by software, hardware, firmware, or a combination thereof as part of a training procedure in embodiments herein. It will be appreciated that further operations may be employed.

A first operation <NUM> may comprise receiving a control signal from a user-operated control apparatus for controlling a remote apparatus.

Another operation <NUM> may comprise decomposing the control signal.

Another operation <NUM> may comprise modelling the user noise signal.

Another operation <NUM> may comprise storing the user noise signal as a signature for the particular user.

In some embodiments, a plurality of user noise signatures for the same user may be stored for respective remote devices that the user is required to operate, on the basis that different unconscious movements may result from operating different types of remote device. Similarly, different signatures may result from different types of input device. So, whereas a first noise signature may result from operating the remote device <NUM> using the handheld controller <NUM>, a slightly different second user noise signature may result from operating the remote device <NUM> using a different handheld controller.

<FIG> is a flow diagram representing operations that may be performed by software, hardware, firmware, or a combination thereof as part of an inference or operational procedure in embodiments herein; in other words, when the user is operating the remote device <NUM>. It will be appreciated that further operations may be employed.

Another operation <NUM> may comprise decomposing the control signal to extract a user noise signal from the received control signal.

Another operation <NUM> may comprise determining if the user noise signal meets one or more predetermined criteria.

Another operation <NUM> may comprise authenticating a user of the control apparatus based on the user noise signal determination.

<FIG> is a schematic view of an apparatus <NUM> providing for providing the authentication system <NUM> above.

The apparatus <NUM> may have a processor <NUM>, a memory <NUM> coupled to the processor and comprised or a RAM <NUM> and ROM <NUM>. The apparatus <NUM> may comprise a network interface <NUM>, a display <NUM> and one or more hardware keys <NUM>. The apparatus <NUM> may comprise one or more such network interfaces <NUM> for connection to a network, e.g. a radio access network or the network <NUM> shown in <FIG>. The one or more network interfaces <NUM> may also be for connection to the internet, e.g. using WiFi or similar.

The memory <NUM> may comprise a non-volatile memory, a hard disk drive (HDD) or a solid state drive (SSD). The ROM <NUM> of the memory <NUM> stores, amongst other things, an operating system <NUM> and may store one or more software applications <NUM>. The RAM <NUM> of the memory <NUM> may be used by the processor <NUM> for the temporary storage of data. The operating system <NUM> or one or more software applications <NUM> may contain code which, when executed by the processor, implements the operations as described above, for example with reference to <FIG> and/or <NUM>.

The processor <NUM> may take any suitable form. For instance, the processor <NUM> may be a microcontroller, plural microcontrollers, a processor, or plural processors and the processor may comprise processor circuitry.

Alternatively, the operations described above may be implemented on a dedicated chip or integrated circuit.

<FIG> show tangible non-volatile media, respectively a removable memory unit <NUM> and a compact disc (CD) <NUM>, storing computer-readable code which when run by a computer may perform methods according to embodiments described above. The removable memory unit <NUM> may be a memory stick, e.g. a USB memory stick, having internal memory <NUM> storing the computer-readable code. The memory <NUM> may be accessed by a computer system via a connector <NUM>. The CD <NUM> may be a CD-ROM or a DVD or similar. Other forms of tangible storage media may be used.

Reference to, where relevant, "computer-readable storage medium", "computer program product", "tangibly embodied computer program" etc., or a "processor" or "processing circuitry" etc. should be understood to encompass not only computers having differing architectures such as single/multi-processor architectures and sequencers/parallel architectures, but also specialised circuits such as field programmable gate arrays FPGA, application specify circuits ASIC, signal processing devices and other devices. References to computer program, instructions, code etc. should be understood to express software for a programmable processor firmware such as the programmable content of a hardware device as instructions for a processor or configured or configuration settings for a fixed function device, gate array, programmable logic device, etc..

As used in this application, the term "circuitry" refers to all of the following: (a) hardware-only circuit implementations (such as implementations in only analogue and/or digital circuitry) and (b) to combinations of circuits and software (and/or firmware), such as (as applicable): (i) to a combination of processor(s) or (ii) to portions of processor(s)/software (including digital signal processor(s)), software, and memory(ies) that work together to cause an apparatus, such as a server, to perform various functions) and (c) to circuits, such as a microprocessor(s) or a portion of a microprocessor(s), that require software or firmware for operation, even if the software or firmware is not physically present. As used in this application, references to "based on" may include "at least partially based on.

In this brief description, reference has been made to various examples. The use of the term 'example' or 'for example' or 'may' in the text denotes, whether explicitly stated or not, that such features or functions are present in at least the described example, whether described as an example or not, and that they can be, but are not necessarily, present in some of or all other examples. Thus 'example', 'for example' or 'may' refers to a particular instance in a class of examples. It is therefore implicitly disclosed that a features described with reference to one example but not with reference to another example, can where possible be used in that other example but does not necessarily have to be used in that other example.

Claim 1:
An apparatus (<NUM>), comprising:
means for receiving a control signal (<NUM>) from a user-operated control apparatus (<NUM>) for controlling a remote apparatus (<NUM>), wherein the control signal is a composite signal comprising a command signal (<NUM>) for controlling the remote apparatus and a user noise signal (<NUM>);
means for extracting the user noise signal from the received control signal by subtracting from the control signal one or more known command signals for possible control actions of the remote apparatus;
means for determining if the user noise signal meets one or more predetermined criteria; and
means for authenticating a user of the control apparatus at least partially based on the user noise signal determination.