Authority before autonomy.

The vehicle no longer trusts the key.

Stolen credentials, cloned fobs, unauthorised drivers, drink-drivers, drug-impaired drivers, fatigued drivers, fleet misuse — every one of these begins with a vehicle accepting an instruction from someone it should not have trusted.

The five-gate architecture, applied to transportation, means the vehicle verifies five things before it will operate. That the driver is biometrically who they claim to be. That they are alcohol-free and drug-free — verified through pupillary response and multi-spectral iris analysis, without a breathalyser or blood sample. That their fatigue index is within safe limits. That the vehicle is where it is permitted to be. That the device issuing the instruction is genuine. And that the credential behind all of it is still valid this second — not last week, not this morning.

The breakthrough is the fifth gate. Revocation is instant and distributed. When a licence is suspended, a fleet contract ends, or a credential is compromised, every vehicle relying on it knows immediately. No database lag. No overnight sync. No manual enforcement.

This is the infrastructure layer for autonomous fleets, insurance telematics, commercial haulage, and the generation of vehicles that must be accountable to more than their owner.

One architecture.
Every domain.

A single patented system that simultaneously verifies identity and all eligibility conditions before granting any operational authority — transport, gambling, gaming, banking, or quantum tokenisation. The same five-element architecture. The same enforcement logic. Domain-agnostic by design.

An operational authority credential is issued exclusively upon simultaneous satisfaction of: biometrically verified identity, all active eligibility evaluation streams evaluated in parallel, and cryptographic binding within a hardware secure element with non-exportable private keys. Any single stream failing denies the credential — regardless of all other streams passing.

Credential invalidation is deterministic and non-overridable. The moment authority is withdrawn — by a regulator, a fleet manager, a self-exclusion register, or a fraud authority — the platform transitions immediately to a restricted or fallback state. In a vehicle: controlled stop. In gambling: account frozen, regulator notified. In banking: transaction suspended. No override. No operator workaround. No gap between revocation and enforcement.

The revocation architecture operates offline. A locally cached revocation list enforces invalidation for up to 72 hours without live network connectivity. A self-excluded gambler is blocked at every operator simultaneously the moment the signal propagates — without a central database, without a manual process, without a second login attempt.

Power where the grid cannot reach.

Sensors, credentials, vehicles, remote installations and sovereign infrastructure all share a constraint: they need continuous power in places where continuous power is not available. Batteries run down. Cables end. Solar fails at night.

The harvesting architecture pulls energy from multiple sources simultaneously — movement, thermal gradient, vibration, electromagnetic ambient — and combines them into a single reliable supply. Where one source fades, another carries the load. Where all fade, the system stores and waits.

The applications are deliberately broad. Autonomous remote sensors. Vehicle-integrated credential hardware that never needs charging. Defence and maritime installations operating beyond infrastructure. Industrial IoT at genuine scale, without the maintenance tax of battery replacement.

Energy is the silent constraint on every ambitious infrastructure project. This patent removes it.

Why this company exists.

I spent twenty-five years in the automotive industry before I invented my first patent. Around 2013, I co-founded iCapture — one of the UK's first 3G connected vehicle dashcam systems. What happened next taught me everything I now build against.

The business was taken through a coordinated partner conspiracy. The technology was misappropriated. I won a £4.5 million judgment in 2022 and am still, years later, pursuing the professional negligence proceedings that followed. The legal outcome matters less than the lesson: if you disclose before you file, and trust before you verify, the infrastructure you built becomes someone else's asset.

IrisKey.ai is built on the opposite protocol. Patent first. NDA before disclosure. License rather than manufacture. Build IP that appreciates over decades, not products that depreciate over quarters.