移动agent系统中的数据完整性分析

由于基于移动agent的分布式计算环境正日益受到越来越多的重视 ,在分析移动agent安全性问题的基础上 ,指出了通常用于保护分布式系统中安全特性方案的不足 ,提出了一个用于保证移动agent在潜在恶意主机上访问时保护收集到的数据完整性的协议。这种协议能够确保数据段的完整性与数据被收集的顺序无关 ,从而使要访问的主机可以随机被访问并能通过加密印章保证所有收集到的数据的完整性 ,因而尤其适用于比较性购物和分布式拍卖的情况。

Data Integrity Analysis of a Mobile Agent System

The use of soft architectures based on mobile agents to develop a distributed computing system is gaining more and more attention. According to the analysis of security problems of a mobile agent, shortcomings of the solutions generally adopted to ensure the security in distributed systems are put forward. In this paper a protocol to protect the integrity of the data collected by mobile agents roaming through a set of potentially malicious hosts is proposed. The protocol can assure the integrity of a sequence of data segments regardless of the order of each segment in the sequence. The sets of hosts can be visited randomly and a cryptographic proof allows for the integrity verification of all the collected data, so the protocol is suitable for free competition scenarios like comparison shopping or distributed auction.