Artificial intelligence (ai) confidentiality proxy to secure ai data sets
AssigneeCisco Technology, Inc.
InventorsM. David Hanes, Vivek Kumar Singh, Gonzalo Salgueiro, Derek William Engi
Life of this patent
Estimating the term…
Abstract
A system and method for an artificial intelligence (AI) confidentiality proxy that can protect a network from the transferal of sensitive AI data sets to outside AI systems. A data contract is established between the proxy and outside AI systems could function as well as user personas for additional protection. This system can also integrate with the network and provide security policy content and inspection rules.
Claims20
A method performed by a proxy that is in communication with one or more users in an enterprise network seeking to send data to one or more artificial intelligence services external to the enterprise network, the method comprising:
- sending, to each of the one or more artificial intelligence services, a message describing restrictions associated with the data to be received from the enterprise network;
- configuring a request, in response to receiving an acknowledgement message from each of the one or more artificial intelligence services, to send the data from a particular user of the one or more users in the enterprise network to a particular artificial intelligence service of the one or more artificial intelligence services, wherein the acknowledgement message indicates acknowledgement that each of the one or more artificial intelligence services will comply with the restrictions;
- and
- forwarding the data from the particular user to the particular artificial intelligence service based on the request.
An apparatus comprising:
- one or more network interfaces that enable communication with one or more users in an enterprise network seeking to send data to one or more artificial intelligence services external to the enterprise network;
- memory;
- and
- at least one computer processor coupled to the one or more network interfaces and the memory, the at least one computer processor configured to perform operations including:
- sending, via the one or more network interfaces, to each of the one or more artificial intelligence services, a message describing restrictions associated with the data to be received from the enterprise network;
- configuring a request to send the data from a particular user of the one or more users in the enterprise network to a particular artificial intelligence service of the one or more artificial intelligence services in response to receiving, via the one or more network interfaces, an acknowledgement message from each of the one or more artificial intelligence services, wherein the acknowledgement message indicates acknowledgement that each of the one or more artificial intelligence services will comply with the restrictions;
- and
- forwarding, via the one or more network interfaces, the data from the particular user to the particular artificial intelligence service based on the request.
One or more non-transitory computer readable storage media encoded with instructions, that when executed by a computer processor of a proxy that is in communication with one or more users in an enterprise network seeking to send data to one or more artificial intelligence services external to the enterprise network, the instructions causing the computer processor to perform operations including:
- sending, to each of the one or more artificial intelligence services, a message describing restrictions associated with the data to be received from the enterprise network;
- configuring a request, in response to receiving an acknowledgement message from each of the one or more artificial intelligence services, to send the data from a particular user of the one or more users in the enterprise network to a particular artificial intelligence service of the one or more artificial intelligence services, wherein the acknowledgement message indicates acknowledgement that each of the one or more artificial intelligence services will comply with the restrictions;
- and
- forwarding the data from the particular user to the particular artificial intelligence service based on the request.
Dependencies are inferred from the claim text.