Zero-Trust Resource Trust Scoring for Dynamic Access Validation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing zero-trust computing environments lack effective mechanisms for dynamically adjusting access controls based on real-time trust assessments, leading to potential security vulnerabilities.

Innovation Solution

Implement a trust scoring framework that evaluates access requests by considering various factors such as user identity, device location, network context, and policy compliance, adjusting trust scores accordingly to enhance security.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional access control mechanisms are used in zero-trust environments, then implementation simplicity is maintained, but security reliability is insufficient due to lack of dynamic trust assessment

Engineering Contradiction:
Improvesecurity reliabilityVSAvoidaccess control complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent implements dynamic access control by continuously evaluating trust scores for resources based on multiple factors including user behavior, device state, network context, and policy compliance. Trust scores are updated in real-time rather than using static access controls, allowing the system to adapt to changing security conditions while maintaining comprehensive monitoring and assessment capabilities.

Inventive Principle:
Principle #15Dynamics

2Reliability

If continuous validation of all access requests is implemented, then security reliability is improved, but processing time increases

Engineering Contradiction:
Improvesecurity validationVSAvoidaccess processing time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The system changes the parameter of trust assessment from binary (authorized/not authorized) to a continuous trust score spectrum. Multiple parameters are evaluated simultaneously including user identity, device location, network conditions, policy compliance, and historical behavior. This allows for more nuanced and efficient decision-making that balances security validation with processing speed by assigning weighted scores to different factors.

Inventive Principle:
Principle #35Parameter changes

3Measurement precision

If multiple policy factors are evaluated for each access request, then measurement precision of trust assessment is improved, but computational complexity increases

Engineering Contradiction:
Improvetrust assessment precisionVSAvoidevaluation system complexity
Core Design Contradiction:
Measurement precisionVSDevice complexity

Solution Approach 1:

The patent creates a universal trust scoring framework that can evaluate multiple different policy factors through a single integrated system. The same trust scoring mechanism handles diverse inputs including user authentication, device compliance checks, network security assessment, and policy violation detection. This multi-functional approach maintains measurement precision across different evaluation dimensions while avoiding the need for separate complex evaluation systems for each factor.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS12556582B2Policy evaluation based trust scoring in a zero-trust computing environment
Publication Date: 2026.02.17 DELL PROD LP
  • US12556582B2 patent drawing
  • US12556582B2 patent drawing
  • US12556582B2 patent drawing

AI summary

Systems and methods provide controlled access to resources in a zero-trust computing environment. Requests for access to resources of the zero-trust environment are tracked, including identifying policies evaluated in response to requests for access to resources. Based on the tracked requests, policies are identified that were satisfied in granting access to resources and that were not satisfied in denying access to resources. Request for access to resources are evaluated based on a trust score for a resource that is calculated based on users requesting access to the resource, hardware requesting access to the resource, software applications requesting access to the resource, networks used to request access to the resource and data exposed by providing the requested access to the resource. The trust score for the resource is adjusted upwards based on the policies satisfied in granting requested access, and adjusted downwards based on policies not satisfied in denying requested access.