@article{ART003399432},
author={SuAn Jang and Jiyong Yang and Geun-Joong Kim and Keun-Ho Lee},
title={A Zero Trust VPN Access Control Architecture Linking Face Presence Verification to Virtual Interface Control},
journal={Journal of Internet of Things and Convergence},
issn={2466-0078},
year={2026},
volume={12},
number={5},
pages={22}
TY - JOUR
AU - SuAn Jang
AU - Jiyong Yang
AU - Geun-Joong Kim
AU - Keun-Ho Lee
TI - A Zero Trust VPN Access Control Architecture Linking Face Presence Verification to Virtual Interface Control
JO - Journal of Internet of Things and Convergence
PY - 2026
VL - 12
IS - 5
PB - The Korea Internet of Things Society
SP - 22
EP -
SN - 2466-0078
AB - Conventional VPNs authenticate users only at connection time and afterwards infer absence from input inactivity, so an unattended or handed-over endpoint keeps network access until a timeout expires. This paper models six post-authentication session threats, derives design requirements, and designs a zero trust architecture in which face presence and liveness evidence from the endpoint camera is a continuous input to the policy decision point (PDP), while the policy enforcement point (PEP) is bound to the create-suspend-revoke lifecycle of a per-session VPN virtual interface. We formalize trust updates, state transitions, exposure-window bounds, and false-lock rates, and analyze the design parameters by simulation with assumed rates and durations of posture changes. Under these assumptions, pose-tolerant presence detection with a 2.2 s grace period keeps false locks below 0.1 per hour while bounding exposure to 2.9 s when the user leaves, and a 240 s identity-confirmation deadline bounds exposure to about 4 minutes when the user is substituted, whereas frontal-only detection still causes 2.6 false locks per hour at a 5 s grace period. These results provide design conditions for reducing post-authentication exposure far below the inactivity and session timeouts of conventional VPNs.
KW - Zero Trust;Continuous Authentication;Face Presence;VPN Access Control;Exposure Window;Threat Model
DO -
UR -
ER -
SuAn Jang, Jiyong Yang, Geun-Joong Kim and Keun-Ho Lee. (2026). A Zero Trust VPN Access Control Architecture Linking Face Presence Verification to Virtual Interface Control. Journal of Internet of Things and Convergence, 12(5), 22.
SuAn Jang, Jiyong Yang, Geun-Joong Kim and Keun-Ho Lee. 2026, "A Zero Trust VPN Access Control Architecture Linking Face Presence Verification to Virtual Interface Control", Journal of Internet of Things and Convergence, vol.12, no.5 22.
SuAn Jang, Jiyong Yang, Geun-Joong Kim, Keun-Ho Lee "A Zero Trust VPN Access Control Architecture Linking Face Presence Verification to Virtual Interface Control" Journal of Internet of Things and Convergence 12.5 22 (2026) : 22.
SuAn Jang, Jiyong Yang, Geun-Joong Kim, Keun-Ho Lee. A Zero Trust VPN Access Control Architecture Linking Face Presence Verification to Virtual Interface Control. 2026; 12(5), 22.
SuAn Jang, Jiyong Yang, Geun-Joong Kim and Keun-Ho Lee. "A Zero Trust VPN Access Control Architecture Linking Face Presence Verification to Virtual Interface Control" Journal of Internet of Things and Convergence 12, no.5 (2026) : 22.
SuAn Jang; Jiyong Yang; Geun-Joong Kim; Keun-Ho Lee. A Zero Trust VPN Access Control Architecture Linking Face Presence Verification to Virtual Interface Control. Journal of Internet of Things and Convergence, 12(5), 22.
SuAn Jang; Jiyong Yang; Geun-Joong Kim; Keun-Ho Lee. A Zero Trust VPN Access Control Architecture Linking Face Presence Verification to Virtual Interface Control. Journal of Internet of Things and Convergence. 2026; 12(5) 22.
SuAn Jang, Jiyong Yang, Geun-Joong Kim, Keun-Ho Lee. A Zero Trust VPN Access Control Architecture Linking Face Presence Verification to Virtual Interface Control. 2026; 12(5), 22.
SuAn Jang, Jiyong Yang, Geun-Joong Kim and Keun-Ho Lee. "A Zero Trust VPN Access Control Architecture Linking Face Presence Verification to Virtual Interface Control" Journal of Internet of Things and Convergence 12, no.5 (2026) : 22.
