An Attack and Repair of Secure Web Transaction Protocol for Anonymous Mobile Agents
The security problems that impact mobile agents include authentication and privacy. A challenging task is to implement secure mobile agents that provide anonymity for the mobile agent. Wang, Zhang, and Wang constructed a scheme that provides secure web transactions with anonymous mobile agents over the internet. Our paper will discuss the Wang, Zhang and Wang protocol(WZW) thoroughly, our work demonstrates the weaknesses of the WZW protocol, showing that it is not as secure as it is claimed to be. In this paper, we will construct attacks on the WZW protocol, provide several repairs and construct a secure scheme for conducting E-commerce using anonymous mobile agents.
KeywordsAnonymity Mobile Agent Security Mobile Agent Authentication E-commerce
Unable to display preview. Download preview PDF.
- 4.Boukerche, A., Ren, Y.: A Novel Solution based on Mobile Agent for Anonymity in Wireless and Mobile Ad hoc Networks. In: Proceedings of the 3rd ACM Workshop on QoS and Security for Wireless and Mobile Networks, pp. 86–94 (2007)Google Scholar
- 5.Chaum, D.: Untraceable electronic mail, return addresses, and digital pseudonyms. Communications of the ACM, 84–88 (1981)Google Scholar
- 6.Chaum, D.: The dining cryptographers problem: unconditional sender and recipient untraceability. Journal of Cryptography, 65–75 (1988)Google Scholar
- 8.Dolev, D., Yao, A.C.: On the security of public key protocols. In: Proceedings of the IEEE 22nd Annual Symposium on Foundations of Computer Science, pp. 350–357 (1981)Google Scholar
- 10.Reed, M., Syverson, P., Goldschlag, D.: Proxies for anonymous routing. In: Proceeding of the 12th Annual Computer Security Applications, pp. 95–104 (1995)Google Scholar
- 11.Saxena, A., Soh, B.: A novel method for authenticating mobile agents with one-way signature chaining. In: Proceedings of The 7th International Symposium on Autonomous Decentralized Systems (ISADS 2005), pp. 187–193 (2005)Google Scholar