US 12,587,529 B2Granted

Methods and systems for security enhancement in artificial intelligence model interactions via automated injection and proxy server implementation

AssigneeWitnessAI, Inc.

InventorsMathew Solnik, Samuel Kimama, Gil Spencer, Jeffrey Dean Walter

Life of this patent

Estimating the term…

Loading patent…

Abstract

The present technology relates to a computer-implemented method for enhancing enterprise-wide security when using Artificial intelligence (AI) models. Embodiments involve a JavaScript injection process facilitated by a proxy server. This process does not require manual installation as it is automatically injected during operation. The JavaScript injection process operates by intercepting unsecured AI input and output data provided by users interacting with AI websites. The input and output data are sent to a security Application Programming Interface (API) which applies an enterprise security policy to the data in real-time, thereby transforming unsecured input and output into secure data. Embodiments provide a robust framework for safe interaction with Artificial intelligence models while mitigating the risks associated with the transmission of sensitive information over the internet.

Claims23

Dependent claims

A computer-implemented method for securely using Artificial Intelligence (AI) models, the computer-implemented method comprising:

automatically injecting a security program, using a proxy server, the automatically injecting the security program embedding code into HTML content of a website enabling security for using Artificial Intelligence (AI) models and the security program being automatically injected and not requiring manual installation, the security program comprising:
intercepting unsecure AI input data from a user inputting data into an input field of the website;
sending the unsecure AI input data to a security Application Programming Interface (API), the security Application Programming Interface (API) enabling enforcing of an AI model input enterprise policy, the enforcing of the AI model input enterprise policy transforming the unsecure AI input data to secure AI input data by modifying the unsecure AI input data in real time;
intercepting unsecure AI output data in response to the secure AI input data being sent to a server of the website;
and
sending the unsecure AI output data to the security Application Programming Interface (API), the security Application Programming Interface (API) enabling enforcing of an AI model output enterprise policy, the enforcing of the AI model output enterprise policy transforming the unsecure AI output data to secure AI output data by modifying the unsecure AI output data in real time.

3 more elements

Dependencies are inferred from the claim text.

Facts

Application: 18/829,021Filed 9 Sep 2024
Published: US 2026/0075055 A112 Mar 2026
Granted: 24 Mar 2026
Term ends: Not estimatedThe source records don’t support an estimate.

Classification4 codes

H04L 63/10
Network architectures or network communication protocols for network security: for controlling access to devices or network resources
H04L 63/0281
For separating internal from external traffic, e.g. firewalls: proxies
H04L 63/20
Network architectures or network communication protocols for network security: for managing network security; network security policies in general
H04L
Digital communication