Authenticated Delegation and Authorized AI Agents
Fuente:
arXiv
Saved in:
| Main Authors: | , , , , , , , |
|---|---|
| Format: | Preprint |
| Published: |
2025
|
| Subjects: | |
| Online Access: | |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| _version_ | 1866915105891942400 |
|---|---|
| author | South, Tobin Marro, Samuele Hardjono, Thomas Mahari, Robert Whitney, Cedric Deslandes Greenwood, Dazza Chan, Alan Pentland, Alex |
| author_facet | South, Tobin Marro, Samuele Hardjono, Thomas Mahari, Robert Whitney, Cedric Deslandes Greenwood, Dazza Chan, Alan Pentland, Alex |
| contents | The rapid deployment of autonomous AI agents creates urgent challenges around authorization, accountability, and access control in digital spaces. New standards are needed to know whom AI agents act on behalf of and guide their use appropriately, protecting online spaces while unlocking the value of task delegation to autonomous agents. We introduce a novel framework for authenticated, authorized, and auditable delegation of authority to AI agents, where human users can securely delegate and restrict the permissions and scope of agents while maintaining clear chains of accountability. This framework builds on existing identification and access management protocols, extending OAuth 2.0 and OpenID Connect with agent-specific credentials and metadata, maintaining compatibility with established authentication and web infrastructure. Further, we propose a framework for translating flexible, natural language permissions into auditable access control configurations, enabling robust scoping of AI agent capabilities across diverse interaction modalities. Taken together, this practical approach facilitates immediate deployment of AI agents while addressing key security and accountability concerns, working toward ensuring agentic AI systems perform only appropriate actions and providing a tool for digital service providers to enable AI agent interactions without risking harm from scalable interaction. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2501_09674 |
| institution | arXiv |
| publishDate | 2025 |
| record_format | arxiv |
| spellingShingle | Authenticated Delegation and Authorized AI Agents South, Tobin Marro, Samuele Hardjono, Thomas Mahari, Robert Whitney, Cedric Deslandes Greenwood, Dazza Chan, Alan Pentland, Alex Computers and Society Artificial Intelligence Networking and Internet Architecture 68M01, 68T01, 68U35, 94A60, 68P20 The rapid deployment of autonomous AI agents creates urgent challenges around authorization, accountability, and access control in digital spaces. New standards are needed to know whom AI agents act on behalf of and guide their use appropriately, protecting online spaces while unlocking the value of task delegation to autonomous agents. We introduce a novel framework for authenticated, authorized, and auditable delegation of authority to AI agents, where human users can securely delegate and restrict the permissions and scope of agents while maintaining clear chains of accountability. This framework builds on existing identification and access management protocols, extending OAuth 2.0 and OpenID Connect with agent-specific credentials and metadata, maintaining compatibility with established authentication and web infrastructure. Further, we propose a framework for translating flexible, natural language permissions into auditable access control configurations, enabling robust scoping of AI agent capabilities across diverse interaction modalities. Taken together, this practical approach facilitates immediate deployment of AI agents while addressing key security and accountability concerns, working toward ensuring agentic AI systems perform only appropriate actions and providing a tool for digital service providers to enable AI agent interactions without risking harm from scalable interaction. |
| title | Authenticated Delegation and Authorized AI Agents |
| topic | Computers and Society Artificial Intelligence Networking and Internet Architecture 68M01, 68T01, 68U35, 94A60, 68P20 |
| url | https://arxiv.org/abs/2501.09674 |