构建可证明安全的量子抗性多智能体治理系统,保障AI通信可控可追溯。
MAGIQ: A Post-Quantum Multi-Agentic AI Governance System with Provable Security

- 用新型量子抗性密码协议实现多智能体通信策略的定义与执行
- 支持会话级策略管控,可对一到多通信设置全局预算限制
- 提供消息溯源机制,确保智能体行为可问责,适配未来量子威胁
当前计算生态正被两大趋势重塑:智能体式AI系统的广泛应用和量子计算的发展。针对智能体系统,核心挑战在于建立安全的治理架构,确保智能体遵守所有者设定的通信与交互规则,并能对其与其他智能体交换的信息负责。针对量子计算威胁,现有系统需改造并设计新的抗量子密码机制以保障长期安全;美国国家标准与技术研究院(NIST)建议自2030年起逐步淘汰包括RSA、Diffie-Hellman(DH)和椭圆曲线加密(ECC)在内的标准公钥算法,2035年后禁止使用。本文提出MAGIQ,一个基于新型高效、可证明安全的后量子密码协议的多智能体AI治理框架。MAGIQ具备四大能力:(i)允许用户为智能体间会话与任务定义丰富的通信与访问控制策略预算,包括一对多会话的全局预算;(ii)通过后量子密码原语强制执行这些策略;(iii)支持会话级策略执行,覆盖智能体间及一对多通信场景;(iv)通过消息归属机制实现智能体对用户的可问责性。我们采用通用组合(UC)框架对系统进行形式化建模与安全性证明。评估结果显示,MAGIQ在计算与通信开销上优于当前领先的智能体框架SAGA。MAGIQ是迈向抗量子安全智能体系统的第一步。
原文摘要 · Abstract (English)
Our computing ecosystem is being transformed by two emerging paradigms: the increased deployment of agentic AI systems and advancements in quantum computing. With respect to agentic AI systems, one of the most critical problems is creating secure governing architectures that ensure agents follow their owners' communication and interaction policies and can be held accountable for the messages they exchange with other agents. With respect to quantum computing, existing systems must be retrofitted and new cryptographic mechanisms must be designed to ensure long-term security and quantum resistance. In fact, NIST recommends that standard public-key cryptographic algorithms, including RSA, Diffie-Hellman (DH), and elliptic-curve constructions (ECC), be deprecated starting in 2030 and disallowed after 2035. In this paper, we present MAGIQ, a framework for policy definition and enforcement in multi-agent AI systems using novel, highly efficient, quantum-resistant cryptographic protocols with proven security guarantees. MAGIQ (i) allows users to define rich communication and access-control policy budgets for agent-to-agent sessions and tasks, including global budgets for one-to-many agent sessions; (ii) enforces such policies using post-quantum cryptographic primitives; (iii) supports session-based enforcement of policies for agent-to-agent and one-to-many agent sessions; and (iv) provides accountability of agents to their users through message attribution. We formally model and prove the correctness and security of the system using the Universal Composability (UC) framework. We evaluate the computation and communication overhead of our framework and compare it with the state-of-the-art agentic AI framework SAGA. MAGIQ is a first step toward post-quantum-secure solutions for agentic AI systems.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。