移动Agent在恶意主机中安全问题

在电子商务应用中,移动Agent被用于代表客户搜索某个特定的产品,在这个过程中移动Agent很容易受到恶意主机的攻击。文中在分析了现有对付恶意主机方法上所存在缺陷的基础上,提出了一种基于改进RSA算法的非交互性CEF签名机制,能够在无交互的条件下进行快速加密和安全的签名,使得客户的签名不会被滥用,解决了移动Agent在恶意环境中所遇到的问题,保证了移动Agent的秘密性和完整性。

Security of Mobile Agent in Hostile Environment

As an application for electronic commerce,a mobile agent is used to search for special products in the server's environment on behalf of a customer. On the way of performing its role, a mobile agent can be vulnerable to several cryptographic attacks especially done by malicious servers.In this paper,on the basis of deficiency analysis of the existing methods to counter malicious servers,introduce a non-interactive CEF signature scheme due to a new RSA cryptosystem, which is applied to the mobile agent system due to the speed of encryption and enhance security and efficiency in a non-interactive environment.By this way the signature of customer won't be misapplied ,and the problems meeting in malicious servers can be settled.All of these can guarantee the security and integrality of mobile agents.