Patent ID: 8656475

Claim:
A method for controlling access for a mobile agent, the method comprising the steps of: transmitting the mobile agent and a role to a domain management server; determining, by the domain management server, a service of a platform corresponding to the role; issuing, by the domain management server, a role ticket to the mobile agent based on the service of the platform; transmitting the mobile agent and the role ticket to the platform; verifying, by the platform, access authority to the service requested by the mobile agent through the role ticket; granting, by the platform, the mobile agent access authority to the service, and performing authentication for the mobile agent accessing a domain, wherein the role ticket authorizes the mobile agent to perform the service on the platform, wherein the step of performing authentication for the mobile agent comprises the steps of: receiving an authenticator transmitted from the mobile agent; and verifying integrity of data obtained by decoding a digital signature of the authenticator, wherein the authenticator comprises an ID of the mobile agent, an ID of a home platform, a message digest of an execution code corresponding to the mobile agent, a lifetime of the authenticator, the digital signature, and a certificate, and wherein the ID of the mobile agent is granted by the home platform when the mobile agent is created, in which the home platform corresponds to a home platform from which the mobile agent has been created.