A nested token-based delegation scheme for cascaded delegation in mobile agent environments

Authors:
Hyeog Man Kwon;Moon Jeong Kim;Young Ik Eom
Affiliations:
School of Information and Communication Engineering, Sungkyunkwan University, Korea;School of Information and Communication Engineering, Sungkyunkwan University, Korea;School of Information and Communication Engineering, Sungkyunkwan University, Korea
Venue:
HSI'03 Proceedings of the 2nd international conference on Human.society@internet
Year:
2003

Citing 7
Cited 0

Authentication in distributed systems: theory and practice

SOSP '91 Proceedings of the thirteenth ACM symposium on Operating systems principles
A calculus for access control in distributed systems

ACM Transactions on Programming Languages and Systems (TOPLAS)
A new approach for delegation using hierarchical delegation tokens

Proceedings of the IFIP TC6/TC11 international conference on Communications and multimedia security II
A Pessimistic Approach to Trust in Mobile Agent Platforms

IEEE Internet Computing
Delegation Protocols for Electronic Commerce

ISCC '01 Proceedings of the Sixth IEEE Symposium on Computers and Communications
A Practically Implementable and Tractable Delegation Logic

SP '00 Proceedings of the 2000 IEEE Symposium on Security and Privacy
Countermeasures for mobile agent security

Computer Communications

Quantified Score

Hi-index	0.00

Visualization

Abstract

In mobile agent environments, cascaded delegation occurs frequently among places due to the mobility of agents. Because the existing scheme considers only the delegation between two places which participate in migration of an agent, it is inadequate in the situation that needs cascaded delegation. In this paper, we propose a delegation scheme that provides agents with secure cascaded delegation. The proposed scheme achieves the goal by nesting each delegation token within the signed part of the next immediate delegation token. We prove that the proposed scheme is secure against the attack of replaying a message and the attack of substituting a delegation token.