一个用于VPN安全机制的移动代理系统

在虚拟专用网中，提出了一个基于移动代理技术的VPNAgent系统，分析了其体系结构并讨论了实现方法。该系统中的移动代理负责到客户端检测数据，为合法的数据加密和签名。然后护送数据包返回．向工作在防火墙处的静态代理出示签名。静态代理检测该签名，将通过检测的数据包除去签名部分．交与目的主机。实现了虚拟专用网中的合法数据包不必解密即可通过防火墙。

A Mobile Agent System for VPN Security Mechanism

A VPNAgent System which based on Mobile agent is proposed for virtual private networks. The system architecture is analyzed and the implementation methods are discussed. Mobile agent works at the client, inspects the data, encrypts and signs the legal ones, and then guards the packet to the firewall., shows the signature to the Static Agent which works at the firewall, the Static Agent inspects the signature and removes it from the valid packet, then sends the packet to the destination host. It implements that legitimate packets are approved to pass through the firewall without inspection in the virtual private networks.