可更新数据的数据完整性保护方法

Integrity protection of renewable data

数据收集是移动Agent的一类重要应用,在多个领域的移动Agent应用系统中涉及到数据收集。由于移动Agent可能受到恶意主机攻击,如何保证收集数据的完整性是一个重要的安全问题。文中在分析移动Agent数据收集的安全性属性的基础上,提出了一个用于保证移动Agent在潜在恶意主机上访问时保护所收集数据的完整性安全协议。该协议能够实现数据的完整性验证与数据被收集的顺序无关,从而可以随机地访问主机,并且同一主机提交的数据可以自己更新,非常适合数据动态变化的应用系统。

Data collection is one kind of important applications of mobile Agent and gets involved in many areas of mobile Agent application system. Because the mobile agents could get the attacks from malicious hosts, how to protect the integrity of the collected data is a crucial issue. In this paper, a protocol to protect the integrity of the collected data, when mobile Agent was roaming through a set of potentially malicious hosts, was proposed based on the analysis of security properties for data collection of mobile Agent. The protocol can assure the integrity verification of the collected data regardless of the collecting order of each data segment. So the set of hosts can be visited randomly and can update their own data. The protocol is suitable for application system with dynamically changing data.