MUMBAI, India, Sept. 7 -- Intellectual Property India has published a patent application (202621088049 A) filed by Vilas Alagdeve; Dr. Shalini Kumari; R Mohemmed Yousuf; Ramya S Pure; Dr. Murthy Ravaleedhar Reddy; Mohammed Shafiulla; Gopi Reddy Ranabothu; Dr. Y. Syamala; Dr. L. Javid Ali; Vijayakumari Rodda; Dr. Amrita; and Sara Lincy Gold S on July 18, 2026, for A Zero-Trust Security Architecture For Continuous Identity Verification And Access Control In Distributed Networks.

Inventors include Vilas Alagdeve; Dr. Shalini Kumari; R Mohemmed Yousuf; Ramya S Pure; Dr. Murthy Ravaleedhar Reddy; Mohammed Shafiulla; Gopi Reddy Ranabothu; Dr. Y. Syamala; Dr. L. Javid Ali; Vijayakumari Rodda; Dr. Amrita; and Sara Lincy Gold S.

The application for the patent was published on September 04, 2026, under issue no. 36/2026.

Abstract: The present invention relates to a Zero-Trust Security Architecture for Continuous Identity Verification and Access Control in Distributed Networks. The proposed architecture is designed to protect modern network environments such as cloud platforms, enterprise systems, edge computing networks, remote access infrastructures, and Internet of Things environments. Unlike traditional perimeter-based security systems that trust users or devices after initial login, the proposed architecture follows the principle of “never trust, always verify.” Every user, device, application, and service is continuously authenticated, validated, and monitored before and during access to protected resources. The architecture includes an identity verification layer, device trust validation layer, contextual risk assessment layer, policy decision and enforcement layer, access control gateway, behavioral monitoring layer, micro-segmentation layer, and automated threat response layer. The system verifies user identity through secure credentials, multi-factor authentication, digital certificates, tokens, biometric verification, or identity provider integration. It also evaluates device security posture, including patch status, encryption, antivirus condition, firewall status, and compliance state. A trust score or risk score is generated based on user behavior, device health, location, access time, network type, and resource sensitivity. Based on the calculated risk level and security policies, the system grants, restricts, challenges, or denies access using least-privilege principles. During active sessions, user behavior and device activity are continuously monitored to detect suspicious patterns, compromised credentials, unauthorized access, or lateral movement. If abnormal activity is detected, the system may revoke access, force re- authentication, isolate the device, block the session, generate alerts, and record audit logs. Thus, the invention provides an adaptive, scalable, and intelligent security framework for protecting distributed network resources.

Disclaimer: Curated by HT Syndication.