用零知识证明实现隐私保护的智能体通信审计。
Zero-Knowledge Audit for Internet of Agents: Privacy-Preserving Communication Verification with Model Context Protocol
- 结合零知识证明与MCP协议,验证消息合规性而不泄露内容。
- 支持异步审计,延迟几乎可忽略,兼容标准MCP通信。
- 适合需合规审计又保护隐私的智能体系统,如金融、医疗场景。
现有智能体通信框架在不泄露交互隐私的前提下难以提供可验证的审计记录。我们提出一种新型审计框架,通过将零知识证明与现有的模型上下文协议(Model Context Protocol, MCP)结合,实现消息内容的隐私保护审计。该方法可在轻量级网络中运行,保持与标准MCP交换的兼容性,并支持异步审计,验证消息格式和类型而无需暴露具体内容。框架支持双向互审:一方可验证通信质量,另一方验证使用指标,全程不泄露敏感信息。我们形式化了安全目标,证明zk-MCP具备数据真实性和通信隐私性,且验证效率高、延迟可忽略。我们完整实现了该框架,包含基于Circom的零知识证明生成和集成于MCP双向通道的审计协议。据我们所知,这是首个能实现无内容暴露的可验证互审的隐私保护智能体通信审计系统。
原文摘要 · Abstract (English)
Existing agent communication frameworks face critical limitations in providing verifiable audit trails without compromising the privacy and confidentiality of agent interactions. The protection of agent communication privacy while ensuring auditability emerges as a fundamental challenge for applications requiring accurate billing, compliance verification, and accountability in regulated environments. We introduce a framework for auditing agent communications that keeps messages private while still checking they follow expected rules. It pairs zero-knowledge proofs with the existing Model Context Protocol (MCP) so messages can be verified without revealing their contents. The approach runs in lightweight networks, stays compatible with standard MCP exchanges, and adds asynchronous audit verification to confirm format and general message types without exposing specifics. The framework enables mutual audits between agents: one side can check communication content and quality while the other verifies usage metrics, all without revealing sensitive information. We formalize security goals and show that zk-MCP provides data authenticity and communication privacy, achieving efficient verification with negligible latency overhead. We fully implement the framework, including Circom-based zero-knowledge proof generation and an audit protocol integrated with MCP's bidirectional channel, and, to our knowledge, this is the first privacy-preserving audit system for agent communications that offers verifiable mutual auditing without exposing message content or compromising agent privacy.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。