无需第三方签名链的移动代理认证协议

Authentication Protocol for Mobile Agent without Trusted Third Parties

移动代理是一种能在不同平台之间移动的程序。移动代理安全中的一个关键问题就是认证移动代理所声称的历史路径(执行平台)是否属实。针对移动代理认证问题提出了一种基于身份加密的认证协议。此协议能使自组织网络中移动代理平台相互之间建立一种信任关系。通过对移动代理所声称的历史路径进行验证,进而建立基于身份信息加密的签名路径链,使移动代理系统在无可信第三方参与下实现身份认证,有效防止恶意的移动代理。

A mobile agent is a mobile program that can migrate between different execution platforms. A key security problem in the mobile agent paradigm is that of trust： how to ensure that the past itinerary （ of execution platforms） claimed by the agent is correct. A new protocol used to authenticate mobile agent is proposed based on the identity - based encryption in an Ad - hoc manner to prevent the hostile mobile agent. The main idea behind our approach is the concept of signature chaining of the historical path.