← Back to all news
arXiv AI

SUDP: Secret-Use Delegation Protocol for Agentic Systems

The paper introduces the Secret-Use Delegation Protocol (SUDP), a method for agentic systems to perform user-authorized operations without granting reusable authority to untrusted requesters. It formalizes the Agent Secret Use (ASU) problem, outlines seven required security properties, and demonstrates that SUDP satisfies six of them under standard cryptographic assumptions, with the remaining property addressed via hardware-rooted runtime composition. A reference implementation shows minimal overhead for mediated calls.

Related stories

arXiv AI
Sep 2

Delegation Without Trust: An Empirical Gap Analysis of Identity, Authorization, and Runtime Governance in Multi-Agent LLM Systems

The paper examines the security challenges of delegating authority to autonomous LLM agents that act on users’ behalf. It introduces a threat model with four adversaries and eight security requirements, demonstrates that current frameworks (LangGraph, CrewAI, AutoGen, MCP) fail to meet these standards, and presents an authorization broker that blocks all identified threats with minimal overhead. The broker is shown to resist numerous attacks and limits compromised sub‑agents to their delegated tasks, and its principles are implemented in VotalAI’s LLM Shield.

By Panduranga Sai Varma Dantuluri, Jyotirmoy Sundi
llmsagents
More like this →