Mobile Agent 1 Mobile Agent 1.1 Mobile Agent 1.2 Mobile Agent

Transcription

1 /2002/13(07) Journal of Software Vol13, No7 Mobile Agent,,, (, ) http//wwwsjtueducn Mobile Agent, Mobile Agent Mobile Agent, Mobile Agent Mobile Agent Lucent Inferno Mobile Agent Mobile Agent; TP393 A Mobile Agent( MA) Agent, Mobile Agent, Mobile Agent, Mobile Agent 1 Mobile Agent 11 Mobile Agent MA Agent, Agent, Agent,,, MA,Agent,, Agent 12 Mobile Agent MA Client/Server,MA (1) MA Client/Server, Agent, Agent MA, Agent,, (2) MA, Agent, (3) MA,,, [1] ; (1970 ),,,, ; (1931 ),,,,,, ; (1977 ),,,, ; (1976 ),,,,

2 1332 Journal of Software 2002,13(7) (4) MA, MA, (5), Agent, MA, (6) Agent,,, WAN [2] 13 Mobile Agent MA, MA, (principal), ;, API,,,MA MA MA 4 [4] ; (CE), Agent (AEE); CE ; CE ( 1 ) [3] Host Host Computation environment Mobile object system Network Computation environment Mobile object system Fig1 MA (1) AEE Agent ; (2) Agent AEE ; The component of the MA system 1 MA (3) Agent Agent ; (4) AEE AEE ; (5) AEE ; (6) AEE MA [5],, 2 MA, 21,, a 1,a 2,a 3, gcd(a i,a j )=1

3 Mobile Agent 1333 MAXNUM A K N 1,N 2,,N K N i, a i a i 1( ), gcd(a i,a j )=1, i,j,1 i<j K; MAXNUM=min(a 1,a 2,,a K ) 1, A Base MAXNUM Base,A N i m (1 m MAXNUM) stamp(i,m)=base+a i m a 1,a 2,,a K, a K 1,a K a K 1<a K, 22 BaseIncr=a K 1 a K (FROM ) (TO ) FROM, (1) N i ;(2) Basei;(3) a i ;(4) ;(5) TO (1) ;(2) j (Base i +j a i ), j 0, 1; 0,,,,,,,,, 23 (1) (replay attack) Mobile Agent N i ( Mobile Agent stamp(i,m)), m N i FROM, 1,, 0, 1 3 (2) Mobile Agent Mobile Agent,,, Mobile Agent A, X,, X, Mobile Agent Y,,, Mobile Agent A X Y A N 1,N 2,,N K, X {N 1,N 2,,N K },Y {N 1,N 2,,N K }, A TO Agent 1 m MAXNUM, Local stamp base Host name Stamp increase N 1 a 1 X a X A Y a Y N K stamp(x,m)=base A +a X m, (1) a K

4 1334 Journal of Software 2002,13(7) MAXNUM=min(a 1,a 2,,a K ) 1 (2) Agent A X Y, 1 n MAXNUM, (1) (3),a X m=a Y n a X m=0 mod a Y gcd(a X,a Y )=1, X,Y,1 X<Y K; stamp(x,m)=base A +a Y n, (3) MAXNUM=min(a 1,a 2,,a K ) 1 m=0 mod a Y (4) (2), m MAXNUM a Y m 0 mod a Y, (5) (4) (5), (3) Mobile Agent Mobile Agent,,,,, Mobile Agent A B Mobile Agent Mobile Agent A B Mobile Agent, B N 1,N 2,,N K, A {N 1,N 2,,N K }, Agent B stamp=stamp(b,m)=base T1 +a A m Agent 1 B, B FROM a NK a NK 1 a N1 Host name Remote stamp base Stamp increase Used stamp bitmap N 1 Base N1 a N1 A Base T1 a A N K Base NK a NK Agent 2 B, B FROM Host name Remote stamp base Stamp increase Used stamp bitmap N 1 Base N1 a N1 A Base T2 a A N K Base NK a NK 22, Agent 1 B, Agent 2 B, (1) Base T1 =Base T2, (replay attack), B Agent (2) Base T1 Base T2, Base T2 =Base T1 +BaseIncr n,(n Z +,n 1), BaseIncr=a NK a NK 1 ; B stamp, stamp=base T1 +a A m Base T1 +a A MAXNUM Base T1 +a NK MAXNUM Base T1 +a NK a NK 1 =Base T1 +BaseIncr Base T1 +BaseIncr n=base T2 B Mobile Agent, MA, A B ( )( 3 ), ( 4 ), MA, MA

5 Mobile Agent , 3 PC, Lucent Inferno V20, Inferno Limbo 2,A,B,C 3, FROM TO, SERVER A FROM TABLE A SERVER B TO TABLE A SERVER C FROM TABLE C TO TABLE C FROM TABLE B TO TABLE B Fig2 A structure sketch map of the incremental timestamp s example 2 3, FROM TO FROM TABLE A REMOTE USED BITMAP LOCAL TO TABLE A B B C C 10 REMOTE FROM TABLE B USED BITMAP LOCAL TO TABLE B A A C C 12 REMOTE FROM TABLE C USED BITMAP LOCAL TO TABLE C A A C B 5 Fig3 Sometime the contents of table FROM and table TO at servers A, B, C 3 A,B,C FROM TO A, A FROM 1 B,B (remote stamp base) 1000, B (stamp increase) 7, (used stamp bitmap) B, A 6 (6 6 ) 6 1,2,4 ( ) A B i (1000 i 7)( 1 i 6), i 0, 1 0, ( ) 2 C, A TO, 500, B C

6 1336 Journal of Software 2002,13(7) 11 10, 9( 2 MAXNUM=min(11,10) 1) A 9, MA A, 110( 2 BaseIncr=10 11), TO (local stamp base) 610, B,C A, A FROM 610, B,C A, 4, MA Java, Java,Aglets [6],Mole [7],MOA [8] Concordia [2] MOA Mole Java IBM Aglets MA Aglet,,Aglet (owner) Aglet, Aglet (capability), CPU Concordia, Agent Agent, (passport),agent passport,passport Agent, Agent ( ) MA, Telescript TACOMA Telescript 1 MA,Agent (permit) Agent Telescript Troms Cornell TACOMA, Agent (principal)( Agent ) Agent MA MA MA, MA 5 Mobile Agent, Mobile Agent Mobile Agent, Mobile Agent References [1] Ma, Jun-tao, Liu, Ji-ren Architecture and technology of mobile agent system Mini-Micro Systems, 1998,19(2)7 14 (in Chinese) [2] Walsh, T, Paciorek, N, Wong, D Security and reliability in Concordia In ElRewini, H, ed Proceedings of the 31st Annual Hawaii International Conference on System Science (HICSS 31) Los Alamitos, CA IEEE Computer Society Press, [3] Peine, H Security concepts and implementation in the ara mobile agent system In ElRewini, H, ed Proceedings of the 31st Annual Hawaii International Conference on System Science (HICSS 31), Los Alamitos, CA IEEE Computer Society Press, [4] Pham, Vu A Karmouch, A Mobile software agents an overview IEEE Communications Magazine, 1998,7(7)26 37 [5] Farmer, WM, Guttman, JD, Swarup, V Security for mobile agents issues and requirements In Proceedings of the 19th National Information Systems Security Conference (NISSC 96), http//csrcnistgov/ nissc/ 1996/ papers/ NISSC96/ paper033/ SWARUP96PDF [6] Karjoth, G, Lange, DB, Oshima, M A security model for aglets IEEE Internet Computing, 1997,1(4) [7] Baumann, J, Hohl, F, Strasser, M Mole concepts of a mobile agent system Journal of World Wide Web, 1997,1(3) [8] Milojicic, D, Laforge, W, Chauhan, D Mobile objects and agents (MOA) design, implementation and lessons learned In Proceedings of the USENIX Conference on Object Oriented Technology and Systems (COOTS 98), Vol 4 New Mexico USENIX, http//wwwinfosystuwienacat/research/agents/ archive/ara-securitypsgz

7 Mobile Agent 1337 [1], Mobile Agent,1998,19(2)7 14 Mobile Agent System by Incremental Timestamp Security Technique WAN Yan, SUN Yong-qiang, ZHU Xiang-hua, TANG Jin (Department of Computer Science and Engineering, Shanghai Jiaotong University, Shanghai , China) http//wwwsjtueducn Abstract The security technology decides the realization of the mobile agent The primary problem solved by this paper is to prevent replay attacks and acts beyond its authorities of malicious mobile agent The concepts, characters and security of mobile agent are described Afterwards, the concepts and advantages of incremental timestamp are proposed, and a specific example and the demonstrations are also presented The mobile agent system that adopts incremental timestamp can protect execute system from damages of hostile mobile agents The incremental timestamp technology has been verified and realized in the mobile agent system which is developed based on the Lucent Company s Inferno system Key words mobile agent; incremental timestamp; security Received September 30, 2000; accepted April 3, OA OA (1) OA ;(2) ;(3) OA ;(4) OA OA ;(5) / ;(6) OA ;(7) / ;(8) OA ;(9) (025) yangming@seueducn