Verus holds fifteen United Kingdom patent applications, and they are one family rather than fifteen separate bets. Underneath all of them is a claim that withdraws itself: what the service or the device says about itself is worked out afresh every time it is asked, from the live thing it describes, so it stops being said the moment it stops being true. The first does that for what a server can hold, deriving the list from its own database. The other fourteen carry it into the parts of a messenger that would otherwise have to keep the record everybody else keeps: who spoke to whom, for how long, who complained about whom, whose limit a payment raised, and whether the phone is still in the hands of the person who was verified.
Method and system for verifiable attestation of a data-retention property of a server
The attestation is computed rather than written down. A column added to the database to record who sent a message stops the service claiming it cannot, in the same request, without anybody editing a policy page.
Applicant
Louis-James Davis
Inventor
Louis-James Davis
Filed
20 August 2026
Office
UK Intellectual Property Office
Method and system for enforcing a data-retention property of a server by derivation of a permitted storage schema and a published assertion from a common register
Saying you cannot keep something is one thing; being unable to is another. The list of what must never be stored becomes the thing that builds the database, so a column recording who spoke to whom is refused rather than reported afterwards, and widening what may be held announces itself in the same edit.
Applicant
Louis-James Davis
Inventor
Louis-James Davis
Filed
22 August 2026
Office
UK Intellectual Property Office
Method and system for negotiating a data-retention property between a client device and a server and for selecting a transmission subset in dependence upon the negotiated property
The app asks what the server is incapable of keeping before it sends anything, and sends only the parts it got an acceptable answer for. That answer is folded into the key the conversation runs on, so a server that changes its database mid-conversation stops being able to read the next message rather than quietly receiving it.
Applicant
Louis-James Davis
Inventor
Louis-James Davis
Filed
22 August 2026
Office
UK Intellectual Property Office
Method and system for metering consumption of a resource against a periodic per-account allowance without retention of a per-account consumption record
Charging by the minute normally means a tally against your name, and a tally of minutes is a record of when you were on a call. Here the minutes are issued in advance as tokens that cannot be traced back to whoever received them, so an allowance can be enforced exactly while no record exists that a call was made.
Applicant
Louis-James Davis
Inventor
Louis-James Davis
Filed
22 August 2026
Office
UK Intellectual Property Office
Method and system for accountable reporting of a message in a relay which retains no record of the originator or of the reporting party
Somewhere to report abuse is a condition of being in the app stores, and the ordinary way to build one records who complained about whom, which is the one thing a private messenger should never hold. Here the sending device seals a tag only the intended recipient can open, so a report proves who sent the message and the service is never told who reported it.
Applicant
Louis-James Davis
Inventor
Louis-James Davis
Filed
22 August 2026
Office
UK Intellectual Property Office
Method and system for conditioning production of a cryptographic attestation upon a locally derived continuity verdict, rendering a device unable to assert an identity attestation where continuity is not established
A verification answers who opened the account. It does not answer who is holding the phone now, and a phone that has been handed over still carries a valid one. The obvious fix, changing what the screen says, is drawn by the same software the other person is holding. So the measurement governs what the phone can sign instead: lose the thread of who is typing and the key that vouches for you cannot be opened, so the far end stops being able to verify you rather than being told a different story.
Applicant
Louis-James Davis
Inventor
Louis-James Davis
Filed
31 August 2026
Office
UK Intellectual Property Office
Method and system for deriving from a live database schema whether a relation path exists between two classes of retained record and for publishing a checkable assertion that two retained facts cannot be correlated
Paying for something means the service has to remember whose limits went up, and separately that a payment was used. Both are kept on purpose, so saying a column is missing proves nothing: a third table carrying both values would put them back together while every such claim still passed. This works out from the live database whether any route joins the two at all, and stops making the claim the moment one appears, naming the table that caused it.
Applicant
Louis-James Davis
Inventor
Louis-James Davis
Filed
31 August 2026
Office
UK Intellectual Property Office
Method and system for establishing the authenticity of a message presented to a reader in a language other than that in which its authenticity was verified
Verus translates on the phone that receives a message, so nothing is handed to a translation service. That protects what was said and creates a quieter problem: the sender signed one set of words and the reader is shown another, produced by their own device, so the words acted on are ones nobody signed while every check still passes. A swapped translation model could put words in a verified sender's mouth without touching the sender, the message or the relay. So the device records what it translated from, what it produced and which engine produced it, keeps the original reachable, and can be asked afterwards to derive the same words again and show whether it can.
Applicant
Verus Communications Ltd
Inventor
Louis-James Davis
Filed
1 September 2026
Office
UK Intellectual Property Office
Method and system for admitting a received frame for retransmission by a radio relay upon presentation of an unlinkable token whose denomination covers the airtime of the retransmission
A long-range radio relay has seconds of airtime an hour, because the rules for the band cap how long each transmitter may be on air, so anybody who can make it repeat their messages can use it up for everyone. Limiting by sender fails because the sender writes its own address. Here every message carries a token the issuer signed without being able to recognise it later. A relay repeats a message only if that token covers the airtime the relay itself will spend. Each relay keeps a list of only the tokens it has spent, which is enough: the limit applies to each transmitter separately, so a copied token can cost any one relay a single transmission. It works with no connection and without the relay learning who sent anything.
Applicant
Verus Communications Ltd
Inventor
Louis-James Davis
Filed
14 September 2026
Office
UK Intellectual Property Office
Locating a person within a building in a radio network
In a fire somebody has to know who is still inside and where. The usual way is a tracker that logs everyone all the time, which is a record of where you were every day. Here the nodes keep nothing about who is attached to them once they lose power, a request to find someone is answered on that person's own phone, and how precise the answer is depends on what the person agreed to share or, in an emergency, on a registered authority. Checking a whole floor is answered with anonymous tokens that the node only counts.
Applicant
Verus Communications Ltd
Inventor
Louis-James Davis
Filed
20 September 2026
Office
UK Intellectual Property Office
Message access in a communication system
Some messages should only be read in one room, or only while the person who sent them is standing there. Checking the location a phone reports does not do that, because a location can be faked. Here the key that opens the message is built inside the phone's protected hardware from the same infrared and radio signals that prove where it is, so the message cannot be opened anywhere else, and it closes again when the reader leaves.
Applicant
Verus Communications Ltd
Inventor
Louis-James Davis
Filed
22 September 2026
Office
UK Intellectual Property Office
Selecting a relay for a call in a communication network
When two phones cannot connect directly, a call goes through a relay. The best relay is the one that suits both callers at once. Finding it usually means each phone testing every relay at the moment the call starts, which slows the call down and tells the network where each caller is. Here each phone measures its connections only now and then in the background. The server works out the best relay for the pair without learning either caller's measurements.
Applicant
Verus Communications Ltd
Inventor
Louis-James Davis
Filed
30 September 2026
Office
UK Intellectual Property Office
GB2623330.4
UK patent pending
Controlling access to images in a monitoring system
A Verus Relay in a building can raise the alarm over radio when the internet is cut or a camera or sensor sees an intruder, and the alarm company will want to look. Usually whether they can look is a setting on someone else's server, so a camera can be watched whenever that server allows. Here the building's own relay keeps its pictures locked, and the only thing that unlocks them is the signed emergency signal the relay sends over radio, which opens the minutes around the emergency and nothing either side. With no emergency there is nothing anyone can open, and every time the building could be seen is on record in the signals themselves.
Applicant
Verus Communications Ltd
Inventor
Louis-James Davis
Filed
4 October 2026
Office
UK Intellectual Property Office
GB2623339.5
UK patent pending
Verifying the movement of goods
A lorry or container can declare its load and its route before it reaches a border, but the declaration only says what the haulier states, and a tracker on the vehicle can be faked or moved. Here Verus Relays on the route, on the ferry and on other shipments travelling the same way act as independent witnesses. The border can only open the declaration if the vehicle really met enough of them along the way, so a load that went where it said passes, and one that did not is the one that gets inspected. The border never needs the vehicle's track.
Applicant
Verus Communications Ltd
Inventor
Louis-James Davis
Filed
5 October 2026
Office
UK Intellectual Property Office
GB2623643.0
UK patent pending
Verifying the origin of a call
Calls claiming to be from a bank, a utility or an employer are one of the commonest ways people are defrauded, because the name and number on the screen are whatever the caller chooses. The usual answer is a register: some company keeps the list of who may call on a business's behalf and is asked about every call. Here the customer's own phone checks, during the call, that the caller is verified as a real person and is a current member of a business that controls its web domain. No server holds the staff list, and someone who leaves simply stops being shown as verified.
Applicant
Verus Communications Ltd
Inventor
Louis-James Davis
Filed
7 October 2026
Office
UK Intellectual Property Office
Why these and not others
Every one of these came out of the same problem met fifteen times while building the service. A messenger that keeps no record of who sent what still has to bill for calls, credit an introduction, rate limit a stranger, accept an abuse report, charge for a raised limit and stay sure who is holding the phone, and the ordinary way to build each of those is a row with somebody's name on it. The filings are what it took to build them without one.
The mechanism in the first application is running now and answers anybody, without an account, at api.verusapp.co.uk/v1/deployment . It lists the columns this deployment does not have, computed from the live schema at the moment you ask. The security page sets out what is certified, by whom, and what is not.