Microsoft patents system that blocks unauthorized devices from reaching network security servers
Microsoft has filed a patent for a security tool that automatically decides which computers in a network are allowed to connect to sensitive security servers. It works by looking at past connection patterns to identify trusted devices and blocking the rest from accessing those critical systems.
In the filing’s own words
Systems and methods herein provide a security control engine and its related functions. In an aspect, a security control engine is provided for controlling access to one or more privileged authentication systems, such as a domain controller. To control remote access to the privileged authentication systems, the security control engine identifies which network devices correspond to the privileged authentication systems. The security control engine also retrieves historical data of client devices within the network and identifies a subset of the client devices as authorized for privileged authentication systems access based on the historical data. The security control engine then determines a remaining subset of client devices as unauthorized to remotely access the privileged authentication systems and blocks the respective client devices from remotely accessing the one or more network devices corresponding to the privileged authentication systems.
What exactly they claim (claim 1)
1. A computing apparatus comprising: a computer-readable storage media; a security control engine comprising processor-executable instructions stored on the computer-readable storage media; and a processor coupled to the computer-readable storage media and configured to execute the processor-executable instructions, wherein the processor-executable instructions, when executed by the processor, direct the computing apparatus, to at least: determine a plurality of client devices within a network; determine historical data for the plurality of client devices, wherein the historical data comprises outgoing network connections for the plurality of client devices within the network; classify a subset of client devices of the plurality of client devices into an unauthorized group for remotely accessing at least one domain controller using the historical data of the respective client devices; and apply an access policy to the subset of client devices based on the subset of client devices being classified in the unauthorized group, wherein the access policy blocks remote access to the at least one domain controller.
Facts
- Company
- Microsoft (Microsoft Technology Licensing, LLC)
- Official title
- SECURITY CONTROL ENGINE(S) FOR DYNAMICALLY CONTROLLING REMOTE ACCESS TO PRIVILEGED AUTHENTICATION SYSTEMS
- Publication number
- US20260291942A1
- Application number
- 19085213
- Filed
- Mar 20, 2025
- Published
- Sep 24, 2026
- Inventors
- 9
- Claims
- 20
Classified under
H04L 63/104 Electricity & electronicsMore from Microsoft in Security & privacy
- Microsoft patents system to call 911 for others during video calls Sep 22, 2026
- Microsoft patents system to block fake code suggested by AI Sep 15, 2026
- Microsoft patents one-way data flow to block network attacks Sep 10, 2026
- Microsoft patents voice coding that hides speaker identity for secure calls Sep 17, 2026
- Microsoft patents security checks for AI chats using user and model profiles Oct 1, 2026
Summaries are simplified from the filing’s own abstract and first claim. A patent filing is not a product announcement.
Patent data and drawings: U.S. Patent and Trademark Office (USPTO). Nebula is not affiliated with or endorsed by the USPTO.