Recently mobile agent technology used in intelligent systems, cloud computing and IOT. However using mobile agents in distributed environment makes them facing several security threats. In this paper, we propose a lightweight authentication protocol to overcome the security problem, and to provide a secure and anonymous mobile agent system. Our protocol is based on Elliptic Curve Cryptography (ECC) and fulfill all security requirements. For the validation of our security protocol, we used Automated Validation of Internet Security Protocols and Applications (AVISPA) tool using HLPSL language. Furthermore, we used Java Agent Development Framework (JADE) to implement and simulate the proposed scheme. Finally, the paper presents the security analysis and comparison with well-known and significant related protocols in secure communication.