AC2 协议:人工智能体缺失的安全层
AC2 Protocol: The missing security layer for AI agents

原始链接: https://www.ac2protocol.org

AC2 协议是 Algorand 基金会推出的一个开源项目,旨在通过硬件绑定认证和点对点通信来解决人工智能的信任挑战。 作为一款非托管钱包,AC2 确保用户能够独享对其助记词和资产的控制权。用户需自行负责个人安全;Pera 钱包无法找回丢失的密钥或账户。由于加密货币交易不可逆,且资产具有波动性和流动性风险,用户务必谨慎行事,并自行管理相关的税务与法律义务。 此外,智能代理商务(Agentic Commerce)的集成带来了一些特定风险,包括潜在的欺诈行为和身份验证问题。强烈建议用户和商家核实所有代理身份,并遵循既定的安全与合规最佳实践,以降低这些风险。

AC2 协议是一项开源标准,旨在通过将敏感凭据与智能体运行环境解耦来保护 AI 智能体。该项目由 Pera Wallet 团队开发,旨在解决智能体可能被攻破(如恶意插件)的风险,确保 API 密钥和会话令牌不会进入运行环境。 AC2 不直接向智能体授予凭据访问权限,而是在用户的本地设备与 AI 智能体之间建立基于硬件的端到端加密连接。当需要执行支付或代码部署等操作时,智能体会请求授权,由用户通过 FIDO2 密钥签名来批准特定的意图。这一过程在保持私钥安全存储于用户设备的同时,创建了可验证的审计追踪。 该协议构建于 DIDComm v2.0、WebAuthn 和 WebRTC 等现有标准之上,在技术上与区块链无关。尽管如此,它与 Algorand 的关联引起了 Hacker News 社区的质疑。批评者认为,对于该工具的核心安全功能而言,加密货币集成是不必要的;而支持者则强调,其基于硬件的“人在回路”审批流程在智能体商业化和自动化方面具有重要价值。
相关文章

原文
 
Solving the AI trust problem with hardware-bound authentication and peer-to-peer communication.

© 2026 AC2 Protocol. All rights reserved. An open-source project by the Algorand Foundation.

Terms of Service

 

Disclaimer: AC2 is a self-custodial Algorand wallet. You — and only you — hold your seed phrase, your keys, and your crypto-assets on your own device. Pera Wallet, Lda does not hold, custody, or have access to your seed phrase, your keys, or your crypto-assets, and cannot recover them on your behalf.

If you lose your device or your recovery phrase, your access to anything you have linked through AC2 may be permanently lost. Your recovery phrase is the only way to restore access to your wallet. Pera cannot recover it for you. If you lose it, your crypto-assets and account associations are lost permanently. Do not share it with anyone, including anyone claiming to be Pera support.

Crypto-asset transactions are irreversible once confirmed on the Algorand network. Crypto-assets are volatile, may lose value, and may become illiquid or unavailable. You are responsible for any tax or other legal obligations arising from your use of crypto-assets.

The use of agentic commerce involves risks, including potential fraud and identity verification issues. Users and merchants should ensure they are using verified agents and follow best practices for security and compliance.

联系我们 contact @ memedata.com