A lightweight multi-factor continuous authentication method based on IBE

As the number and diversity of Internet of Things (IoT) devices continue to rise, enterprises employ various security measures for efficient user identity authentication and ongoing device security monitoring. To meet the security requirements of IoT system, we implement the zero trust concept to facilitate continuous authentication of the security status and behavior of access entities. However, traditional PKI-based identity authentication methods face challenges with complex key distribution and management no longer fulfilling the security and efficiency needs for identity authentication in modern networks. Consequently, we integrate identity based encryption (IBE) with zero trust principles, introducing a lightweight, multi-factor continuous authentication method. Specifically, we enhance the security of continuous authentication protocols by integrating and verifying multidimensional factors including user, device, time, and event information based on IBE. In addition, the experimental results indicate that the obtained scheme outperforms most state-of-the-art schemes in terms of computational and communication overhead.