A Security Model for Mobile Agents using X.509 Proxy Certificates

Mobile agent technology presents an attractive alternative to the client-server paradigm for several network and real-time applications. However, for most applications, the lack of a viable agent security model has limited the adoption of the agent paradigm. This thesis presents a security model for mobile agents based on a security infrastructure for Computational Grids, and specifically, on X.509 Proxy Certificates. Proxy Certificates serve as credentials for Grid applications, and their primary purpose is temporary delegation of authority. Exploiting the similarity between Grid applications and mobile agent applications, this thesis motivates the use of Proxy Certificates as credentials for mobile agents. A new extension for Proxy Certificates is proposed in order to make them suited to mobile agent applications, and mechanisms are presented for agent-to-host authentication, restriction of agent privileges, and secure delegation of authority during spawning of new agents. Finally, the implementation of the proposed security mechanisms as modules within a multi-lingual and modular agent infrastructure, the Distributed Agent Delivery System, is discussed.

Grantor dc:publisher

University of North Texas

Year dc:date

2002

Author dc:creator

• Raghunathan, Subhashini

Contributors dc:contributor

• Mikler, Armin R.
• Tate, Stephen R.
• Boukerche, Azzedine
• Jacob, Roy T.

• Mobile agents (Computer software)
• Computer security.
• mobile agents
• security
• security model
• credential management
• proxy certificates

Statement dc:rights

• Public
• Copyright
• Raghunathan, Subhashini
• Copyright is held by the author, unless otherwise noted. All rights reserved.

Language dc:language

English

Identifier

oclc: 52136235
https://digital.library.unt.edu/ark:/67531/metadc3320/
ark: ark:/67531/metadc3320

OAI identifier oai:identifier

info:ark/67531/metadc3320