Access control method based on zero-trust security, device, and storage medium

ChangeBridge: Patent Grants - Networking (H04L)

Published March 31st, 2026

Detected March 31st, 2026

Summary

The USPTO granted Patent US12592829B2 to Tencent Cloud Computing (Beijing) Co., Ltd covering a zero-trust access control method with cryptographic identity validation. The patent contains 20 claims and was filed on March 20, 2023. Inventors include Lianying Wang, Chuanda Ding, and Yang Yu.

View original document View source feed page

What changed

USPTO granted Patent US12592829B2 to Tencent Cloud Computing (Beijing) Co., Ltd for an access control method based on zero-trust security principles. The patent covers a process for receiving service access requests with user identity information, sending identity validation requests to a server, receiving challenge information, generating signature information using a private key, and sending the signature information back to the server for validation before granting access. The patent includes 20 claims and CPC classifications in H04L 9/0825, H04L 9/0897, and H04L 9/3271.

This is a routine USPTO patent grant notice with no compliance requirements or deadlines for third parties. Patent holders receive exclusive rights for 20 years from the filing date (March 20, 2023). No action is required by other entities unless they wish to design around the patent claims or challenge validity.

Source document (simplified)

← USPTO Patent Grants

Access control method based on zero-trust security, device, and storage medium

Grant US12592829B2 Kind: B2 Mar 31, 2026

Assignee

TENCENT CLOUD COMPUTING (BEIJING) CO., LTD

Inventors

Lianying Wang, Chuanda Ding, Yang Yu

Abstract

In an access control method, a service access request of a service application is received. The service access request includes identity information of a user. An identity validation request is sent to a server. The identity validation request includes the identity information of the user. Challenge information is received from the server based on the identity information of the user in the identity validation request being determined to be valid. Signature information of the challenge information is generated based on the challenge information and a private key. The signature information is sent to the server. A signature valid message is received from the server based on the challenge information being obtained from the signature information with a public key associated with the identity information of the user. Based on the signature valid message, the service access request is sent to the server.