一个基于群签名的移动代理安全路由协议

A SECURE ROUTING PROTOCOL OF MOBILE AGENTS BASED ON GROUP SIGNATURE

移动代理系统安全一直是个备受关注的问题,尤其是对恶意主机对移动代理(以下简称MA)的攻击的研究目前还处于起步阶段。文献[1]所提出的一种MA安全路由协议的不足并对其改进,其中最重要的一项改进就是将群签名的概念首次引入到MA系统中。改进后的安全路由协议降低了恶意主机集群故意跳过某台应该访问的主机的可能性;免除对不在线或拒绝提供服务的主机的多次徒劳连接;减少每台主机所需持有的其它主机公钥数目和花费在验证MA合法性上的时间;提高MA所有者在追踪过程中查找DoS攻击者的效率。

ecurity for mobile agent system is always a much concerned issue, especially now the study on the attack against mobile agent from malicious hosts is just start. In the paper three problems of the protocol presented in reference [ 1 ] were analyzed and the corrections were proposed. Amongst them the most important one is that it is the first time to integrate Group signature into MA system. The improved secure routing protocol decreased the possibility that malicious hosts group bypass wittingly a host which shall be visited, eliminates the futile links to offline hosts or to those rejecting services. Meanwhile it also reduced the number of public keys of other hosts held by each host and the time for authenticating the validity of MA, thus the efficiency the MA owners searching DoS attackers during the tracing process was raised.