System for continuous identity verification and access control in company-wide computer infrastructures

Abstract

System for continuous identity verification and access control in cross-company computing infrastructures, comprising an identity acquisition unit, a cross-company identity mapping unit, a device state verification unit, a behavior analysis unit, a context evaluation unit, a dynamic trust value calculation unit, an access decision unit, and a permission adjustment unit, wherein the system is configured to repeatedly acquire technical identity, device, behavior, and context parameters during an ongoing access session, generate a current trust value from them, and automatically adjust access permissions to the current trust value.