Behavioral Biometrics-Powered Continuous Authentication for Zero-trust Remote Work Environments: A Multi-factor Identity Verification Framework

Suleiman S. Abba *

University of the Cumberlands, 6178 College Station Drive, Williamsburg, KY 40769, United States of America.

Onyinye Agatha Obioha-Val

University of the Cumberlands, 104 Maple Drive, Williamsburg, KY 40769, United States of America.

Valerie Ojinika Ejiofor

University of Tampa, 401 W Kennedy Blvd, Tampa, FL 33606, United States of America.

Oluwadayo Mafolasere Olaniyi

University of the Cumberlands, 6178 College Station Drive, Williamsburg, KY 40769, United States of America.

Nanyeneke Ravana Mayeke

University of the Cumberlands, 104 Maple Drive, Williamsburg, KY 40769, United States of America.

*Author to whom correspondence should be addressed.


Abstract

This research presents a behavioral biometrics-powered continuous authentication framework designed for zero-trust remote work environments in healthcare. The study integrated keystroke dynamics, mouse movement patterns, and contextual risk factors into a multimodal system enabling seamless, real-time identity verification. Using a fused dataset of 3,600 samples from 24 users derived from public keystroke and mouse-dynamics repositories and augmented with healthcare-specific synthetic data where 79 behavioral features were engineered and normalized. Six machine learning and deep learning models were trained, including Random Forest, XGBoost, Support Vector Machine (SVM), LSTM, CNN-LSTM, and CNN, with Random Forest and XGBoost achieving the best performance at 98.25% accuracy, 0% Equal Error Rate (EER), and an AUC-ROC of 1.0000. The framework operated frictionlessly, with inference times below 2.6 ms, ensuring zero disruption to clinical workflows. Dynamic trust scoring enabled adaptive access control, while attack simulations across six threat scenarios yielded a 90.3% detection rate, including 100% for insider threats and zero-effort impersonation. Full compliance with HIPAA standards was validated through continuous monitoring, audit logging, and real-time threat response. The system outperformed traditional authentication methods in accuracy, usability, and security resilience. Despite strong results, limitations include constrained user diversity and simulated environments. The framework advances zero-trust principles by providing passive, high-precision authentication suitable for distributed healthcare systems. Future work should focus on longitudinal field deployment and adaptive modeling to address behavioral drift and emerging threats.

Keywords: Behavioral biometrics, continuous authentication, zero-trust, keystroke dynamics, healthcare security.


How to Cite

S. Abba, Suleiman, Onyinye Agatha Obioha-Val, Valerie Ojinika Ejiofor, Oluwadayo Mafolasere Olaniyi, and Nanyeneke Ravana Mayeke. 2025. “Behavioral Biometrics-Powered Continuous Authentication for Zero-Trust Remote Work Environments: A Multi-Factor Identity Verification Framework”. Asian Journal of Research in Computer Science 18 (12):20-41. https://doi.org/10.9734/ajrcos/2025/v18i12788.

Downloads

Download data is not yet available.