Abstract: It is very common that proprietary agent has to migrate in the environment of open network to fulfill the business logic efficiently.In this case，how to protect the recipient’s platform from malicious code，and at the same time how to attest to the trustworthiness of the recipient’s platform by the recipient are both typical problems.Utilizing trusted computing technology，we design a trusted download protocol and solve the aforementioned problems efficiently.We also use AVISPA toolset to verify this protocol and the results of verification demonstrate that this protocol does realize mutual platform integrity authentication，mutual entity authentication and confidentiality and integrity of proprietary agent during transit.

Key words: trusted computing, trusted download, proprietary agent

摘要： 私有代理程序在开放网络中因为业务需要而进行迁移是一个常见的活动，如何保证接收方主机平台不受恶意程序攻击，同时又要确认接收方平台的可信度是一个具有普遍意义的问题。利用可信计算技术，设计了一个可信下载协议，有效地解决了上述问题，并利用AVISPA工具包对协议进行了验证，验证结果表明该协议实现了双向平台完整性鉴别、双向实体鉴别以及私有代理程序在迁移过程中的机密性和完整性。

关键词: 可信计算, 可信下载, 私有代理程序