BZET-IAM: Enabling Blockchain-Based Zero Trust SSO for Dynamic Identity and Access Management

Abstract

As cloud adoption grows, Identity and Access Management (IAM) faces increasing complexity due to reliance on centralized systems controlled by Cloud Service Providers (CSPs), raising concerns over data leakage and single points of failure. This paper proposes BZET-IAM, a trust-based Single Sign-On IAM (SSO-IAM) framework built on Consortium Blockchain to support hybrid, multi-application cloud environments across domains. The system integrates Zero Trust Architecture (ZTA), Self-Sovereign Identity (SSI), and Zero-Knowledge Proofs (ZKPs) to enable dynamic, privacy-preserving authentication using verifiable claims. Trust-scores and contextual information are embedded in access tokens to support continuous verification and adaptive access control. Blockchain ensures tamper-proof, auditable authentication and authorization. Experimental results show that the proposed approach achieves lower authentication and privilege update costs under dynamic, context-aware access scenarios.