A novel zero-trust network access control scheme based on the security profile of devices and users

) presents three main novel features: security related attributes regarding both configuration and operation are considered for network access control of final devices/users; a dynamic supervision procedure is implemented to evaluate the security profile associated to devices/users over time and, if so, to apply corresponding access restrictions; and