移动代理同态加密主动保护技术研究

针对移动代理(MA)在异质网络环境中的安全问题,提出了一种同态加密主动保护策略。加密后的移动代理可在其它网络平台上运行而无需解密,MA及产生的结果数据最终由MA生成者解密,从而减少了中间环节的加、解密时间。该方案采用加乘同态加密三地址码操作数,组合函数加密三地址码操作码的保护策略,同时验证了加密、解密算法的正确性及安全性。实验结果表明,对比数据迷乱方法,该方案节省执行时间近1/3,并能及时侦测恶意主机。

Research of mobile agent active protection based on homomorphism encryption technology

As a new distributed computing technology of mobile agent(MA),agent is completely exposed in remote host and is easy to be isolated and attacked by the malicious host.Homomorphism encryption protecting scheme was put forward,aiming to solve the security problems of mobile agents migrating across heterogeneous network execution environments.Homomorphism idea was applied to mobile cryptography,and encrypted mobile codes could be executed directly on different platforms without decryption.Encrypted results were decrypted by MA creator,and decreasing executing time of handling process effectively.Addition-multiplication homomorphism(AMH) encryption strategy was introduced,encrypting steps were used as follows:three address operands are encrypted by AMH,three address operating codes are encrypted by composite function,and the correctness and security of encryption and decryption method were verified in this scheme at the same time.Experimental results show that by contrast to data obfuscation method,nearly 1/3 executing time will be saved using this protection scheme and the malicious hosts are detected timely.