Design and Implementation of a Zero Trust Access Control Model Driven by Session Lifecycle (IEEE Access, 2026)