基于TNC的Mobile Agent系统Agent安全迁移方案设计.docVIP

  基于 TNC 的 Mobile Agent 系统 Agent 安全 迁移方案设计# 沈志东1，佟强2* 5 10 15 20 25 30 35 （1. 武汉大学国际软件学院，武汉市 430079； 2. 东北大学软件学院，沈阳市 110819） 摘要：提高 mobile agent 分布式系统安全性的关键在于如何有效的解决 mobile agent 迁移时 的安全问题。本文采用基于可信网络链接（TNC）的可信性验证与度量方法增强 mobile agent 迁移过程的安全性；通过可信平台基础模块（TPM）提供 mobile agent 迁移宿主平台的可信 性验证依据，进而构建 mobile agent 平台之间的动态安全验证基础；并强化 mobile agent 的 迁移宿主主机间可信性验证和 mobile agent 迁移实体在迁移过程中的可信性验证与评估。文 中着重阐述了 mobile agent 迁移时实体间的可信性验证处理过程，并提出了 mobile agent 安 全迁移时进行可信性验证与度量的可信代理安全上下文环境的设计方案。 关键词：分布式系统；移动代理；安全迁移，可信网络连接； 中图分类号：TP39 A TNC enabled Method for Agents Secure Migration in Mobile Agent System SHEN Zhidong1, TONG Qiang2 (1. International School of Software, Wuhan University, Wuhan 430079; 2. Software College, Northeastern University, Shen Yang 110819) Abstract: How to archieve trusted verificatons among mobile agents and their host is a critial problem to improve the security of mobile agent distributed system. In this paper, the trusted computing technology (TNC) is used to improve the trusted verification and measurement for the mobile agent distributed system. The trusted mobile agent system is designed on trusted computing platform and the trusted verification evident can be achieved from the trusted platform module (TPM). The dynamic secure verification basement is built for mobile agent platform. The verification and evaluation for the trust relation of different entities is improved by this technology. The method of using trusted network connection to build a trusted migration environment for mobile agent is elaborated emphasizedly. The design for trusted agent secure context environment used for trusted verification and measurement on migration are also represented. Key words: distributed system; mobile agent; safe migration; trusted network connection 0 引言 作为一种典型的分布式系统，mobile agent 系统面临的一个难题是如何解决迁移实体在 各个主机平台之间迁移时所代来的安全问题 [1][2] 实体和迁移目标宿主平台的可信性验证与度量是解决该问题的关键因素。近些年快速发展的 可信网络连接技术（Trusted Network Connection，TNC）通过使用基于可信主机的可信计算 技术实现网络的可信接入控制，从而为网络环境中的主机提供了平台可信性验证措施[