Affiliations: [a] Department of Automation and Systems – Federal University of Santa Catarina, C.P. 476 CEP. 88040 900 Florianópolis, SC Brazil. Tel.: +55 48 333 7675; Fax: +55 48 333 9770; E-mail: [email protected], [email protected], [email protected] | [b] Graduate Program in Applied Computer Science, Exact Sciences and Technology Center, Pontifical Catholic University of Paraná Curitiba PR Brazil. Tel.: +55 41 3271 1347; Fax: +55 41 3271 1669; E-mail: [email protected]
Correspondence:
[*]
Corresponding author
Abstract: The paradigm of mobile agents may be used in large-scale distributed systems due to its flexibility that comes from the mobility notion. However, this promising technology brings some security concerns of its own. This paper focuses on mechanisms of the Mobile Agent Security Scheme – MASS – for protecting mobile agents against malicious platforms by considering large-scale systems. This proposed scheme, based on secure data repositories, comprises prevention and detection cryptographic protocols of agent security violation. The scheme is based on the SPKI/SDSI infrastructure and on the concept of SPKI Federation for providing scalability and flexibility to the distributed applications on the Internet. In addition, it proposes an approach on how trust building in mobile agent-based architectures can be reinforced by the use of security mechanisms in the search and select of partners for creating a Virtual Enterprise. A prototype of the MASS was implemented and integrated in order to demonstrate its suitability for a distributed application with mobile agents (MobiCII system).
Keywords: Mobile agent security, secure data repositories, prevention and detection mechanisms
