为AI代理设计安全发现与互操作的通用目录系统
Agent Name Service (ANS): A Universal Directory for Secure AI Agent Discovery and Interoperability
- 基于DNS架构与公钥证书实现可信代理身份验证
- 支持多通信协议的模块化适配层，实现跨平台交互
- 适合构建可扩展、可信的多智能体系统生态
AI代理的爆发式增长亟需安全可靠的发现机制。本文提出代理名称服务（ANS），一种基于域名系统（DNS）的新型架构，填补了公开代理发现框架的空白。ANS提供协议无关的注册基础设施，利用公钥基础设施（PKI）证书实现可验证的代理身份与信任。其核心创新包括：形式化的代理注册与续期机制，用于生命周期管理；类DNS命名规范与能力感知解析；支持多种通信标准（A2A、MCP、ACP等）的模块化协议适配层；以及定义明确的安全解析算法。通过JSON Schema实现结构化通信，并完成全面威胁分析。该系统解决了多智能体系统中安全发现与交互的核心挑战，为未来可互操作、可信赖、可扩展的智能体生态奠定基础。
原文摘要 · Abstract (English)
The proliferation of AI agents requires robust mechanisms for secure discovery. This paper introduces the Agent Name Service (ANS), a novel architecture based on DNS addressing the lack of a public agent discovery framework. ANS provides a protocol-agnostic registry infrastructure that leverages Public Key Infrastructure (PKI) certificates for verifiable agent identity and trust. The architecture features several key innovations: a formalized agent registration and renewal mechanism for lifecycle management; DNS-inspired naming conventions with capability-aware resolution; a modular Protocol Adapter Layer supporting diverse communication standards (A2A, MCP, ACP etc.); and precisely defined algorithms for secure resolution. We implement structured communication using JSON Schema and conduct a comprehensive threat analysis of our proposal. The result is a foundational directory service addressing the core challenges of secured discovery and interaction in multi-agent systems, paving the way for future interoperable, trustworthy, and scalable agent ecosystems.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品；中文卡片由大模型生成，请以原文为准。