基于Merkle树的安全移动代理路由协议及其推广

Mobile Agent Route Protection Based on Merkle Trees and Its Extension

本文对DomingoJ.等人提出的一个高效的移动代理路由协议进行了分析,指出其具有一个很严重的安全缺陷:不能抵制路由主机间的共谋攻击.在此基础上,利用hash函数,提出了一个基于Merkle树的安全移动代理路由协议,并分析了其安全性、计算复杂度以及信息传输量.结果表明该方案不仅弥补了原有协议的缺陷,而且保持了原协议高效的特点.最后,将该方案其推广至动态路由.

The characteristics of mobile agents make them ideal for electronic commerce applications in open networks. Security is a fundamental precondition for the acceptance of mobile agent systems. In this paper, we analyze the effective route protection based on mobile agents given by Domingo J. and point that the protocol has security threat：it is not against collusion of malicious hosts. After that, using hash function, a secure itinerary protection of mobile agents based on Merkle trees is presented. Its and computational cost are discussed in detail. The results show that our method not only satisfies all security properties but also keeps the characters of the protocol existed. Finally, Our idea is extended to protect flexible itineraries too.