Microsegmentation is what zero trust looks like once it stops being a slogan and becomes a network design. Instead of one hard perimeter with a soft interior, the network is carved into many small zones, and traffic between them is allowed only by explicit policy. An attacker who breaches one segment cannot move laterally into the rest — the lateral-movement that turns a foothold into a catastrophe is blocked by construction.
ColorTokens, a microsegmentation specialist, landed a tight family of three grants on the same December 2024 day. US12177260B2, US12177261B2, and US12177262B2 all carry the title “Adaptive network security using zero trust microsegmentation” and the same inventor team, classified under H04L 63/20 with H04L 63/0263 (firewall/filtering) and H04L 63/1425 (anomaly detection).
Three near-identical grants issued together is a deliberate fencing strategy — covering variants of one core invention to make the protection hard to design around. The shared CPC mix is the substance: policy enforcement (63/20), packet-level filtering (63/0263), and anomaly detection (63/1425). Read together, the claims describe segmentation that watches the network and adjusts.
“Adaptive” is the word doing the differentiating. Static microsegmentation — draw the zones once, enforce forever — ages badly as workloads move, scale, and change. The claimed adaptivity ties the segmentation to observed behavior and risk, so the zones and policies reshape themselves rather than requiring constant manual re-drawing. That coupling of detection to enforcement is the harder, more valuable engineering.
Per the desk's discipline: these are issued grants (B2), not applications, and they claim methods/systems, not a specific shipped feature — though ColorTokens's microsegmentation product is the obvious context. The triple-grant pattern is the strategically interesting part.
For the systems reader, this slots into the broader zero-trust enforcement story — Sophos's gateway management, Zscaler's segmentation-policy generation, ColorTokens's adaptive zones. The contested IP across these vendors is consistently in the enforcement layer: not the principle of zero trust, but the machinery that makes a network actually behave that way.