移动代理电子商务环境下的安全迁移模型研究

发布时间：2018-04-20 16:12

本文选题：电子商务 + 移动代理　；参考：《华中科技大学》2011年硕士论文

【摘要】：移动Agent技术的诞生,带来了电子商务领域研究的革命,使智能电子商务成为未来电子商务模式的发展方向。然而,由于移动Agent的移动性和智能性等特点具有两面性,它给电子商务研究注入新的活力的同时,也带来了新的非传统的安全问题,而这也成为了阻碍智能电子商务进一步发展的瓶颈。因而,必须要解决移动Agent的安全问题,特别是移动Agent的迁移安全是当前研究的难点之一。针对移动agent及其迁移过程中面临的安全问题和现有安全策略的不足,以公钥加密体制为基础,提出了一种具备容错和时限机制的移动Agent安全迁移模型SecRoute。在该安全迁移模型中,采用了强认证体制,并引入了一个可信的第三方平台。在节点之间的迁移采取了类似多次握手的请求迁移与确认算法,可以有效检测迁移中的常规单点故障,保证迁移的准确性和安全性。同时,在移动Agent迁移执行过程中,利用一个可信平台进行限时执行检测,可以有效检测恶意主机的重复执行和阻塞攻击。在发生故障之后,通过冗余备份机制进行故障的恢复,防止迁移中断,有效提高了迁移的安全性和健壮性。通过在IBM Aglets平台上利用Java语言对SecRoute算法进行仿真实验和结果分析,证明了算法的有效性和可行性。通过和其他算法的对比分析,该算法在身份验证、故障检测和容错方面都表现出良好的性能。最后,在移动代理电子商务环境下对该算法测试,验证了SecRoute算法在应用环境中的有效性和可行性。
[Abstract]:The birth of mobile Agent technology brings the revolution in the field of electronic commerce and makes intelligent electronic commerce the development direction of the future electronic commerce mode. However, due to the dual characteristics of mobile Agent, such as mobility and intelligence, it not only injects new vitality into the research of electronic commerce, but also brings new non-traditional security problems. And this also became the bottleneck that hinders intelligence E-commerce further development. Therefore, it is necessary to solve the security problem of mobile Agent, especially the migration security of mobile Agent is one of the difficulties in current research. Aiming at the security problems faced by mobile agent and its migration process and the shortcomings of existing security policies, a secure migration model for mobile Agent with fault-tolerant and time-limited mechanism is proposed based on public key encryption system. In this model, a strong authentication scheme is adopted and a trusted third party platform is introduced. The migration between nodes adopts a request migration and confirmation algorithm similar to multiple handshakes, which can effectively detect the common single point faults in the migration and ensure the accuracy and security of the migration. At the same time, in the process of mobile Agent migration execution, using a trusted platform for time-limited execution detection can effectively detect the repeated execution and blocking attacks of malicious hosts. After the failure occurs, the redundant backup mechanism is used to recover the fault and prevent the migration interruption, which effectively improves the security and robustness of the migration. The effectiveness and feasibility of the algorithm are proved by the simulation experiment and result analysis of SecRoute algorithm on the platform of IBM Aglets using Java language. Compared with other algorithms, the algorithm shows good performance in authentication, fault detection and fault tolerance. Finally, the validity and feasibility of the SecRoute algorithm in the application environment are verified by testing the algorithm in the mobile agent e-commerce environment.
【学位授予单位】：华中科技大学
【学位级别】：硕士
【学位授予年份】：2011
【分类号】：TP393.08

【参考文献】