一种新的移动Agent安全体系设计方法

A New Design Method of Mobile Agent Security Architecture

针对现有移动Agent安全系统在大规模开放式网络应用中存在的问题,提出了以Agent为本构建移动A gent安全体系的一种新方法,设计了具体的实施方案:Agent注册和Club服务机制.前者引入Agent注册处对Agent代码进行事前验证;后者引入Club服务器为用户提供Agent信息咨询服务.这种方案使移动Agent运行环境可以在保证Agent不对系统造成损害的同时,对特定Agent本身的资源需求进行授权.文中还给出了安全体系的结构和功能,并开发了遵循这一设计方案的原型系统Roamer3.0,说明了该方法的可行性和有效性均优于传统系统.

According to the difficulties which are faced when existing mobile agent security systems are carried out in large-scale open networks, a new method of structuring mobile agent security architecture with agents as root is put forward and the concrete scheme-Agent Register and Club Service mechanism is designed. The former introduces Agent Registry to validate the codes of agents in advance and the latter introduces Club Server to provide users agents information consulting service. With such scheme mobile (agent) runtime environment can determine the permissions of an agent according to the requests of the agent at the same time it is sure the agent is not harmful to the system. A framework of the security architecture is given and the functions of the components are explained. And an prototypical system based on the scheme-Roamer 3.0 is developed and it indicates that this method is superior to traditional systems on feasibility and effectivity.