A client computing device comprising: a processor, a memory to store data and software used during operation of the client computing device by a user, and an I/O subsystem to communicatively couple the memory to the processor, wherein the I/O subsystem includes a trusted execution environment module that operates independently of the processor to: provide a secure and isolated environment that cannot be accessed by the processor or other components of the client computing device; generate a continuous authentication assertion to indicate that continuous authentication of the user is monitored; send the continuous authentication assertion to a key distribution center server; request an initial ticket from the key distribution center server; receive the initial ticket from the key distribution center server; request a service ticket from the key distribution center server required to access a service provider server; receive the service ticket from the key distribution center server required to access the service provider server, wherein the service ticket comprises the continuous authentication assertion; request access to the service provider server with the service ticket; and access the service provider server in response to verification of the continuous authentication assertion. a processor, a memory to store data and software used during operation of the client computing device by a user, and an I/O subsystem to communicatively couple the memory to the processor, wherein the I/O subsystem includes a trusted execution environment module that operates independently of the processor to: provide a secure and isolated environment that cannot be accessed by the processor or other components of the client computing device; generate a continuous authentication assertion to indicate that continuous authentication of the user is monitored; send the continuous authentication assertion to a key distribution center server; request an initial ticket from the key distribution center server; receive the initial ticket from the key distribution center server; request a service ticket from the key distribution center server required to access a service provider server; receive the service ticket from the key distribution center server required to access the service provider server, wherein the service ticket comprises the continuous authentication assertion; request access to the service provider server with the service ticket; and access the service provider server in response to verification of the continuous authentication assertion. provide a secure and isolated environment that cannot be accessed by the processor or other components of the client computing device; generate a continuous authentication assertion to indicate that continuous authentication of the user is monitored; send the continuous authentication assertion to a key distribution center server; request an initial ticket from the key distribution center server; receive the initial ticket from the key distribution center server; request a service ticket from the key distribution center server required to access a service provider server; receive the service ticket from the key distribution center server required to access the service provider server, wherein the service ticket comprises the continuous authentication assertion; request access to the service provider server with the service ticket; and access the service provider server in response to verification of the continuous authentication assertion.