Patent ID: 8086863
Filing Date: 2011-12-27
Classification: H04L

Abstract:
1. A method for protecting data and a path of a mobile agent (MA) from a first server within a network system having a plurality of servers (S 0 , S 1 , . . . , S n ), wherein the mobile agent has to pass a number of the servers according to an appropriate succession that defines the path of the mobile agent, the method comprising: jointly encrypting the path and data intended for any one of the servers within a nested structure, the nested structure being built up on a number of nested terms corresponding to the number of servers, each nested term being decryptable by exactly one server of the number of servers in such a manner that each server of the number of servers gets access only to the data intended for it and to a section of the path, respectively; and sending the mobile agent through the path, wherein each of the plurality of servers has a pair of a public key (KS choosing a unique number (r0) and assigning it to the mobile agent; choosing for each server the mobile agent has to pass a secret symmetric key (S encoding each secret key (S encrypting each secret key (S encoding via a recursive workflow the data and the path jointly in a nested structure consisting of a number of nested terms corresponding to the number of servers, the workflow starting by encoding as kernel of an innermost term the data (m