Secure Mobile Agent-Based Merchant Brokering in Distributed Marketplaces

Cooperating merchants establish a distributed marketplace under the auspices of an independent market authority. Each merchant's server is equipped with a trusted device, a smart card for example, provided by the market authority. The market authority plays the role of a trusted third party for the customer as well as for the merchants. This paper describes protocols that prevent the malicious alteration of the data collected by visiting mobile agents roaming through the marketplace without being detectable by subsequent servers or by the owner of the agent upon its return. Another protocol makes the trusted device a secure execution platform for routines provided by the agent owner.