【摘要】 移动代理是一种新兴的分布式计算模式,具有广泛的应用前景,安全问题是移动代理系统能否成功应用的关键。在分析移动代理系统存在的主要安全需求及基于角色访问控制特性的基础上,利用扩展的X.509公钥证书,提出了基于RBAC的移动代理安全访问策略,通过基于角色的授权实现了对代理服务器资源的访问控制,利用公钥认证协议实现了移动代理与代理服务器之间的安全认证,同时采用数据加密实现了信息的安全传输。更多还原

【Abstract】 Mobile agent has promising application in future as a rising distributed computing paradigm. Security is the principal problem of its application. The security requirements of mobile agent system and the characters of role-based access control are analyzed, on the base of which a security policy is proposed by utilizing extended X.509 short-lived certification. Access control of resource on agen server can be realized though role-based authorization, and the security authentication between mobile agent and agent server can be actualized using public key, and the secure transmission of information can be simultaneously achieved though data encryption.更多还原