Research On Mobile Agent Security Using Attribute-Based Encryption

As a new paradigm for distributed computing,mobile agent system has been widely used in developing applications of open,distributed and mixed environments.However,free roaming mobile agents travel to execute task on distrustful hosts or platform in unreliable environments,which may encounter multiple types of attacks aiming at their data.Hence,this thesis focuses on security schemes for the dynamic components(i.e.retrieved information,executing status)of mobile agent.Starting with a survey on mobile agent's construction,migration schemes and security requirements,the accomplished work is as follows:(1)A new security scheme based on attribute-based encryption for free roaming mobile agent is proposed.This scheme adapts ciphertext-policy attribute-based encryption and ECDSA algorithms,and chaining encryption on signed data that collected after migrating onto a remote host.Our approach is effective in defending colluded attacks after removing trusted third party,and also has complexity advantage over existing schemes and enhanced security for data roaming with mobile agent.(2)A decentralized multi-authorities attribute-based signcryption(DMA-ABSC)scheme is presented and implemented in mobile agent's security solution.The DMA-ABSC scheme has multiple attribute authorities which issuing private key to users without certification authority's global coordination.Any party can join and act as an authority by creating a public key,and encryption and signature algorithms are integrated in one scheme.Therefore it is more appropriate for mobile agents' security in distributed network.In Random Oracle Model,we proved our scheme is secure against IND-ABSC-CCA and EUF-ABSC-CMA.(3)The security features and computing complexity of both schemes are carefully analyzed and compared with other schemes.The experimental results demonstrate the proposed security schemes' performance of security and efficiency.