To fulfill the first requirement of verifying identity-based authentication, you would use Access Control (IAM). This is the mechanism within Azure that allows you to manage who has access to Azure resources, and what they can do with those resources, which is the foundation of identity-based access. For the second requirement of granting access for a limited time frame (in this case, the year 2023), the most precise tool is the Shared access signature (SAS). An SAS is a string containing a security token that enables delegated access to storage resources with a specific set of permissions for a specified time interval.

Microsoft Learn. "Authorize access to Azure blobs and queues using Azure Active Directory." Microsoft Docs, https://learn.microsoft.com/en-us/azure/storage/common/storage-auth-aad-overview. Section on "Identity-based authentication."

Microsoft Learn. "Grant limited access to Azure Storage resources using shared access signatures (SAS)." Microsoft Docs, https://learn.microsoft.com/en-us/azure/storage/common/storage-sas-overview. Section on "SAS token and parameters."

IEEE. "Cloud Security: A Survey of the State-of-the-Art." IEEE Communications Surveys & Tutorials, vol. 16, no. 1, pp. 294-319, 2014. DOI: 10.1109/COMST.2013.111813.130543. Discusses the principles of role-based access control (RBAC) in cloud environments.

MIT OCW. "6.857 Computer and Network Security." Lecture 12, "Access Control." Discusses the fundamental concepts of identity management and time-limited access tokens.