标题： 经过认证的委托和授权的智能代理 显示英文标题

标题： Authenticated Delegation and Authorized AI Agents

摘要： 自主AI代理的快速部署在数字空间中带来了授权、问责和访问控制方面的紧迫挑战。 需要新的标准来了解AI代理代表谁行事，并适当引导其使用，保护在线空间的同时释放自主代理任务委托的价值。 我们引入了一个新颖的框架，用于对AI代理进行认证、授权和可审计的权限委托，使人类用户可以安全地委托并限制代理的权限和范围，同时保持清晰的问责链。 该框架基于现有的身份识别和访问管理协议，扩展了OAuth 2.0和OpenID Connect，加入了代理特定的凭证和元数据，同时与已建立的认证和网络基础设施保持兼容。 此外，我们提出了一种框架，用于将灵活的自然语言权限转换为可审计的访问控制配置，从而在多种交互模式中实现对AI代理能力的稳健作用范围界定。 综上所述，这种实用的方法促进了AI代理的立即部署，同时解决了关键的安全和问责问题，致力于确保代理AI系统仅执行适当的操作，并为数字服务提供商提供一种工具，使其能够启用AI代理交互而不承担可扩展交互带来的风险。 显示英文摘要

摘要： The rapid deployment of autonomous AI agents creates urgent challenges around authorization, accountability, and access control in digital spaces. New standards are needed to know whom AI agents act on behalf of and guide their use appropriately, protecting online spaces while unlocking the value of task delegation to autonomous agents. We introduce a novel framework for authenticated, authorized, and auditable delegation of authority to AI agents, where human users can securely delegate and restrict the permissions and scope of agents while maintaining clear chains of accountability. This framework builds on existing identification and access management protocols, extending OAuth 2.0 and OpenID Connect with agent-specific credentials and metadata, maintaining compatibility with established authentication and web infrastructure. Further, we propose a framework for translating flexible, natural language permissions into auditable access control configurations, enabling robust scoping of AI agent capabilities across diverse interaction modalities. Taken together, this practical approach facilitates immediate deployment of AI agents while addressing key security and accountability concerns, working toward ensuring agentic AI systems perform only appropriate actions and providing a tool for digital service providers to enable AI agent interactions without risking harm from scalable interaction.