Network Access Control Using Risk-Based Versioning

ChangeBridge: Patent Grants - Networking (H04L)

Published March 31st, 2026

Detected March 31st, 2026

Summary

The USPTO granted Patent US12592971B1 to Calix, Inc. covering a method for controlling network access between clients and servers using application software versioning to determine client risk levels. The technology employs different program sets based on risk assessment, using high-security programs for high-risk clients and a combination of high and low-security programs for lower-risk clients, with potential implementation in zero trust network access systems.

View original document View source feed page

What changed

USPTO granted Patent US12592971B1 to Calix, Inc. (inventors: Youwu Tu, Jie Zhang) covering a network access control component that determines client risk levels based on application software versions. The component applies a first set of high-security programs for negotiation with high-risk clients and a second set including both high and low-security programs for lower-risk clients. The technology supports secure network protocols and zero trust network access implementations.

This is a patent grant with no immediate compliance obligations. Entities developing network access control or ZTNA solutions should review the patent claims to assess potential licensing needs or freedom-to-operate considerations. No regulatory deadlines, penalties, or required actions apply to this intellectual property grant.

Source document (simplified)

← USPTO Patent Grants

Controlling network access using risk levels determined by user activity and program versioning

Grant US12592971B1 Kind: B1 Mar 31, 2026

Assignee

Calix, Inc.

Inventors

Youwu Tu, Jie Zhang

Abstract

A component controlling network access between a client and a server using application software versions to determine a risk level of the client. The component uses a first set of programs for negotiation with the client if the risk level is high, wherein the first set of programs includes programs with high security level, and it uses a second set of programs for negotiation with the client if the risk level is not high, wherein the second set of programs includes programs with high security level and programs with low security level. The component may utilize secure network protocols for communication between the client and server, and may be included as a gateway in a zero trust network access (ZTNA) system.