一种基于信誉度的移动代理安全策略  

An Security Policy of Mobile Agent Based on Creditworthiness

作　　者：杨新旺 汲锡林 霍永华[3] 王志浩[3] 

机构地区：[1]陆军装甲兵学院,北京100072 [2]中国电子设备系统工程公司研究所,北京100141 [3]中国电子科技集团公司第五十四研究所,河北石家庄050081

出　　处：《计算机与网络》2017年第23期62-65,共4页Computer & Network

基　　金：国防基础科研计划基金项目资助

摘　　要：针对移动代理和主机的双平面认证问题,在已有移动代理安全问题研究的基础上,研究了安全保护策略,对移动代理携带的重要数据信息进行加密,提出了信誉度的概念,对信誉度进行描述和划分,确定信誉度等级和相应的操作权限,构建主机和移动代理之间的双向信誉度和安全校验认证,利用信誉度等级区分是否为恶意主机或代理,拒绝恶意主机和代理的操作请求,附实例证明了安全保护策略对移动代理安全的作用。Aiming at the security problem of mobile agent, based on the existing research on mobile agent, this paper studies the security protection policy. The important data and information carried by mobile agent are encrypted, and the conception of creditworthiness is put forward. The creditworthiness is described and divided to confirm the classification and corresponding operation privilege. The bidirectional creditworthiness and security parity-check authentication between the host and mobile agent are constructed. The malicious hosts or mobile agents are distinguished by using creditworthiness classification. The operation requests from the malicious host or mobile agent are refused. Finally, the test results of an instance show that the security protection policy is useful for the security of mobile agent.

关 键 词：移动代理 信誉度 信誉度等级 操作权限 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]