Abstract:

Agent interconnection has become a key development direction for artificial intelligence applications, with significant differences existing in user authorization processes under various deployment models. Current agent authorization models face multiple security risks in interconnection scenarios. Firstly, starting from the differences in agent deployment models, compares the authorization processes of rapid deployment on cloud platforms and enterprise private deployment; analyzes the security risks of intelligent agents in calling and being called scenarios, and analyzes the risks associated with entity identities such as agent identity codes, workflows, model context protocol services, etc; summarizes the risk points of identity forgery from two dimensions: personnel identity verification and identity authentication, with a focus on multimodal forgery and the security challenges posed by intelligent assistants with the ability to autonomously execute long-chain tasks. Finally, technical improvement suggestions are proposed from the aspects of dynamic management of identity codes, workflow authorization granularity, inter service authentication, multimodal liveness detection, and operational traceability, providing reference for security design in agent interconnection environments.

Key words: agent interconnection, user authorization, identity forgery, Claw agents