Method and system for electronic resource sharing

Abstract

Method and system for facilitating access to electronic resources hosted on remote systems without providing general access to the remote host systems. A server requests and receives information from a host system about the location of one or more specific electronic resource on the host system. The location information may be encrypted and / or may not be in a format usable by an intended recipient (e.g., an AI assessment tool). The location information is then used by the server to create a resource locator for each electronic resource request. The resource locator may comprise a URL or other pointer. The resource locator is then encrypted and passed to a recipient. The recipient may be an automated or autonomous assessment tool. In some cases, multiple resource locators for multiple electronic resources may be generated and one resource locator may be passed as input to an electronic resource accessed through another resource locator.

Description

Attorney Docket No. 1697P001US01METHOD AND SYSTEM FOR ELECTRONIC RESOURCE SHARINGTECHNICAL FIELD

[0001] The present invention relates to data sharing. More specifically, the present invention relates to secure sharing of electronic resources.BACKGROUND

[0002] The rise in the use of and interest in systems that involve or are based on artificial intelligence has created the need to ensure that such systems are safe and trustworthy. Such Al systems, while useful tools, may be used for less than useful or even nefarious purposes.

[0003] As such, many tools are being developed to gather data about Al systems, to assess such systems, and / or to operate to prevent undesirable uses of such systems. However, such tools have certain drawbacks. In particular, many of the corporations and organizations developing the Al systems cannot risk their datasets or Al models becoming public. Accordingly, there is a reluctance to share these resources with investigators / assessors, even for assessment purposes. Further, there is a reluctance to provide investigators / assessors with direct copies of the electronic resources, as access to such copies may be difficult to control later on.

[0004] There is thus a need for systems and methods that can access electronic resources in a secure manner without creating local copies of the resources on external systems.SUMMARY

[0005] This document discloses a method and system for facilitating access to electronic resources hosted on remote systems without providing general access to theAttorney Docket No. 1697P001US01 remote host systems. A server requests and receives information from a host system about the location of one or more specific electronic resource on the host system. The location information may be encrypted and / or may not be in a format usable by an intended recipient (e.g, an Al assessment tool). The location information is then used by the server to define a resource locator for each electronic resource request. The resource locator may comprise a URL or other pointer. The resource locator is then encrypted and passed to a recipient. The recipient may be an automated or autonomous assessment tool. In some cases, multiple resource locators for multiple electronic resources may be generated and one resource locator may be passed as input to an electronic resource accessed through another resource locator.

[0006] In a first aspect, this document discloses a method for facilitating secure access to electronic resources that are hosted on a host system, said method comprising:(a) sending, from a server, a request for information on a location of at least one of said electronic resources on said host system;(b) receiving, at said server, said information from said host system;(c) creating, at said server, at least one resource locator based on said information, said at least one resource locator thereby pointing to said location;(d) encrypting, at said server, said at least one resource locator to thereby produce an encrypted version of said at least one resource locator; and(e) passing said encrypted version of said at least one resource locator to a recipient, wherein said at least one of said electronic resources comprises at least one of: a dataset; a database; an Al model; and an interface for operating at least one Al model that is hosted on said host system, wherein said resource locator is in a format usable by said recipient, wherein said recipient is an Al assessment tool,Attorney Docket No. 1697P001US01 wherein, when said recipient uses a decrypted version of said encrypted resource locator, said recipient is granted access to said at least one electronic resource, and wherein said recipient’s access to said host system is limited to said at least one electronic resource.

[0007] In another embodiment, this document discloses a method wherein said at least one electronic resource comprises a plurality of electronic resources.

[0008] In another embodiment, this document discloses a method wherein each resource locator for said plurality of electronic resources is separately encrypted.

[0009] In another embodiment, this document discloses a method wherein:- said plurality of electronic resources comprises at least one data set and at least one Al model; and- a resource locator for said at least one data set is passed to said at least one Al model such that said Al model processes said at least one data set.

[0010] In another embodiment, this document discloses a method wherein all of said electronic resources are hosted on a logically single host system.

[0011] In another embodiment, this document discloses a method wherein at least two of said plurality of electronic resources are hosted on logically different host systems.

[0012] In another embodiment, this document discloses a method wherein said method is performed responsive to a request from said recipient.

[0013] In another embodiment, this document discloses a method wherein said location information is encrypted at said host system.

[0014] In another embodiment, this document discloses a method wherein said at least one resource locator is a Uniform Resource Locator (URL).

[0015] In a second aspect, this document discloses a system for facilitating secure access to electronic resources that are hosted on a host system, said system comprising:Attorney Docket No. 1697P001US01- a server in communication with said host system, said server being configured for:- sending a request to said host system, said request requesting information on a location of at least one of said electronic resources;- creating at least one resource locator based on said information, said at least one resource locator thereby pointing to said location;- encrypting said at least one resource locator to thereby produce an encrypted version of said at least one resource locator; and- passing said encrypted version of said at least one resource locator to a recipient, wherein said at least one of said electronic resources comprises at least one of: a dataset; a database; an Al model; and an interface for operating at least one Al model that is hosted on said host system, wherein said resource locator is in a format usable by said recipient, wherein said recipient is an Al assessment tool, wherein, when said recipient uses a decrypted version of said encrypted resource locator, said recipient is granted access to said at least one electronic resource, and wherein said recipient’s access to said host system is limited to said at least one electronic resource.

[0016] In another embodiment, this document discloses a system wherein said at least one electronic resource comprises a plurality of electronic resources.

[0017] In another embodiment, this document discloses a system wherein each resource locator for said plurality of electronic resources is separately encrypted.

[0018] In another embodiment, this document discloses a system wherein:- said plurality of electronic resources comprises at least one data set and at least one Al model; andAttorney Docket No. 1697P001US01- a resource locator for said at least one data set is passed to said at least one Al model such that said Al model processes said at least one data set.

[0019] In another embodiment, this document discloses a system wherein all of said electronic resources are hosted on a logically single host system.

[0020] In another embodiment, this document discloses a system wherein at least two of said plurality of electronic resources are hosted on logically different host systems.

[0021] In another embodiment, this document discloses a system wherein said at least one resource locator is a Uniform Resource Locator (URL).BRIEF DESCRIPTION OF THE DRAWINGS

[0022] The present invention will now be described by reference to the following figures, in which identical reference numerals refer to identical elements and in which:Figure 1 is a block diagram of a system according to an aspect of the invention;Figure 2 is a block diagram of a subsystem of Figure 1;Figure 3 is a block diagram of another embodiment of Figure 1; andFigure 4 is a flowchart detailing a method according to an aspect of the invention.DETAILED DESCRIPTION

[0023] The present invention provides a method and system for secure sharing of electronic resources. Some example embodiments now will be described moreAttomey Docket No. 1697P001US01 fully hereinafter with reference to the accompanying drawings, in which some, but not all example embodiments are shown. The examples described and pictured herein should not be construed as being limiting as to the scope, applicability or configuration of the present disclosure. Rather, these example embodiments are provided so that this disclosure will satisfy applicable legal requirements. Like reference numerals refer to like elements throughout. Furthermore, as used herein, the term “or” is to be interpreted as a logical operator that results in true whenever one or more of its operands are true. As well, as used herein, the expression “at least one of [x] and [y] ” means and should be construed as meaning “[x], [y], or both [x] and [y] ”. As used herein, operable coupling should be understood to relate to direct or indirect connection that, in either case, enables functional interconnection of components that are operably coupled to each other. Additionally, when the term “data” is used, it should be appreciated that the data may in some cases include simply data or a particular type of data generated based on operation of algorithms and computational services, or, in some cases, the data may actually provide computations, results, algorithms and / or the like that are provided as services.

[0024] As used in herein, the term “module” is intended to include a computer-related entity, such as but not limited to hardware, firmware, or a combination of hardware and software (z. e. , hardware being configured in a particular way by software being executed thereon). For example, a module may be, but is not limited to being, a process running on a processor, a processor (or processors), an object, an executable, a thread of execution, and / or a computer. By way of example, both an application running on a computing device and / or the computing device can be a module. One or more modules can reside within a process and / or thread of execution and a module may be localized on one computer and / or distributed between two or more computers. In addition, these components can execute from various computer readable media having various data structures stored thereon. The modules may communicate by way of local and / or remote processes such as in accordance with a signal having one or more data packets, such as data from one module interacting with another module in a local system, distributed system, and / or across a network such as the Internet with other systems by way of the signal. Each respective module may performAttorney Docket No. 1697P001US01 one or more functions that will be described in greater detail herein. However, it should be appreciated that although this example is described in terms of separate modules corresponding to various functions performed, some examples may not necessarily utilize modular architectures for employment of the respective different functions. Thus, for example, code may be shared between different modules, or the processing circuitry itself may be configured to perform all of the functions described as being associated with the modules described herein. Furthermore, in the context of this disclosure, the term “module” should not be understood as a nonce word to identify any generic means for performing functionalities of the respective modules. Instead, the term "module" should be understood to be a modular component that is specifically configured in, or can be operably coupled to, the processing circuitry to modify the behavior and / or capability of the processing circuitry based on the hardware and / or software that is added to or otherwise operably coupled to the processing circuitry to configure the processing circuitry accordingly.

[0025] As depicted in the block diagram of Figure 1, the system 10 comprises a server 20 that communicates with a host system 30 and a recipient 40. The host system 30 contains electronic resources 30a, 30b, 30c, ... 30 / 7. (As should be understood, the host system 30 is a logically single system that may comprise numerous systems and / or subsystems.)

[0026] The server 20 is configured to request at least one of the electronic resources 30a, 30b, 30c, ... 30« from the host system. The host system 30 provides information regarding the location of the electronic resource(s) to the server 20. The information is preferably provided to the server 20 using secure transmission protocols, such as (without limitation) HTTPS. Additionally, the location information may be encrypted at the host system, depending on the embodiment. The server 20 decrypts that information as needed. As may be imagined, the location information from the host system may be in any format, such as a hostsystem-specific file path. However, that format may not be usable by the intended recipient 40. For example, the intended recipient 40 may be an Al assessment tool that requires pointers to follow a specific format, or that can only follow pointers in a specific format.Attorney Docket No. 1697P001US01

[0027] Accordingly, the server 20 uses the location information from the host system 30 to create at least one resource locator. The at least one resource locator is a pointer pointing to the location of the at least one electronic resource on the host system 30. For example, if electronic resource 30b is desired, the resource locator would be a pointer pointing to the location of electronic resource 30b on host system 30. The resource locator has a specific predefined format that is usable by the intended recipient 40.

[0028] The resource locator is then encrypted at the server 20 using any suitable encryption method(s). The encrypted resource locator is passed to the recipient 40, which can use that encrypted resource locator to access the electronic resource. That access may be made through the server 20 or through a different connection, such as a different server connected to the Internet, depending on the parameters of the resource locator and the host system 30.

[0029] Each electronic resource 30a, 30b, 30c, ... 30 / 7 may have different security settings and / or different relevance to the recipient 40. The electronic resources may include, without limitation, datasets, databases, Al models or code, and / or interfaces for such Al models or code. Of course, other forms of electronic resource may also be shared and / or accessed according to the disclosures herein. Additionally, electronic resources may be combined with each other using the generated encrypted resource locators. As one example, an encrypted resource locator for a remote database could be passed as an input to an Al model that is accessed by way of a different encrypted resource locator. In such a case, the recipient of the encrypted resource locator for the database would be the host system of the Al model. The Al model could then process the database (or specific entries therein), without having access to anything else in the host system of the remote database.

[0030] Depending on the implementation, standard data transfer encryption methods may be sufficient for the resource locator(s). For example, transport layer security (TLS) encryption and / or secure sockets layer (SSL) encryption may be sufficient. However, in some embodiments (e.g, depending on the nature of the electronic resource(s), the security standards of the host system, etc.), more complex encryption methods may be implemented. As one non-limitingAttomey Docket No. 1697P001US01 example, the resource locator may be encrypted using public key cryptography wherein the private key is separately provided to the recipient 40. Of course, any other suitable cryptographic methods or algorithms may be employed, alternatively or additionally to public key cryptography. Further, if multiple electronic resources are simultaneously requested, the resource locators for each may be encrypted separately from each other, and may have different levels of encryption, different types of encryption applied, and / or different decryption parameters or keys.

[0031] In some embodiments, the resource locator is a Uniform Resource Locator (URL). However, the pointer may be any suitable pointer, such as a specific hash value, file path, etc. that is capable of being resolved to the desired electronic resource within the host system by the intended recipient. It should also be understood that the pointer / resource locator preferably does not give access to the entire host system 30, but merely to the desired electronic resource(s).

[0032] Additionally, in some embodiments, the electronic resources are merely made available to the recipient 40, rather than fully transferred or transferable. That is, the recipient may be granted access to view and / or use the electronic resource(s) on the host system, but not to save or electronically copy the electronic resource(s). Such a configuration may be controlled by, for example, access permissions configured on the server 20 for each recipient 40. As one example, a specific recipient may be granted permissions to use a specific electronic resource and a different recipient may be granted permissions to both use and copy that specific electronic resource.

[0033] As another potential access control method, the resource locator(s) for the electronic resource(s) may be time-limited or restricted based on a certain number of uses. That is, in some embodiments, the resource locator may “expire” after a predetermined time (such as a day or a week). Alternatively, and / or additionally, the resource locator may be “single use” (that is, only one access to the electronic resource is permitted before the resource locator is deprecated). Similarly, the resource locator may be set to expire after three access requests, after ten access requests, or after any suitable number of access requests. Such controls areAttorney Docket No. 1697P001US01 preferably implemented by the server 20. For example, the server 20 may be configured to deny access requests made using an ‘expired’ resource locator.

[0034] Access controls may also depend on the nature of the electronic resource(s). For example, the electronic resource may be a remote database that already uses well- known authentication techniques (such as, for example, API keys or the OAuth 2.0 authorization protocol). In such cases, the server 20 would be configured to provide necessary credentials / authorizations to the electronic resource and / or the electronic resource-management tool(s). As well, access tracking (e.g, access logs and automated / autonomous monitoring of access attempts) may be implemented to secure the electronic resource(s) and / or host system(s), as well as the system 10 itself from attack.

[0035] Figure 2 details a recipient 40, which may be in some embodiments a subsystem of the system 10 in Figure 1. The recipient 40 comprises a processor 41 connected to at least one display 42a, 42b, 42c. As should be understood, any number of displays 42 may be connected to the processor 41 and may take any suitable form. A desktop monitor 42a, a tablet 42b, and a laptop computer 42c are depicted in Figure 2 for convenience and should not be construed as limiting the recipient to only such displays. Further, the processor 41 and the display 42 can form a single physical unit (as in, e.g, a laptop computer, a tablet, a smartphone, etc.).

[0036] As well, in some embodiments, no display 42 is used. In such embodiments, the recipient 40 comprises the processor 41 which processes the electronic resource once received, generates at least one result, and passes the at least one result to a different system. There is thus no requirement that the electronic resource(s), or even conclusions based thereon, ever be displayed in a human-readable or visible format.

[0037] The processor 41 (potentially in coordination with the server 20 and / or different servers / processing units) may implement an Al assessment tool for assessing any desired parameters of the electronic resources. As non-limiting examples, such a tool may assess any of the following characteristics of the electronic resources: reliability;Attorney Docket No. 1697P001US01- accuracy;- bias;- fairness;- transparency;- accountability;- performance;- compliance with one or more predetermined standard(s), such as technological standards, laws, regulations, principles, and / or guidelines;- explainability;- interpretability;- privacy;- ethics;- safety;- security; and / or- use or use cases.

[0038] As well, different assessments may be performed by different tools simultaneously or in sequence. For example, one recipient / tool may assess the explainability of an Al model via a resource locator provided according to the disclosures herein while another recipient / tool assesses the bias in that same Al model using the same resource locator. Thus, it should be understood that the recipient 40 may comprise multiple recipients / assessment tools. Additionally, multiple different electronic resources can be simultaneously assessed by different recipients / tools. For example, while the use case(s) of an Al model are assessed by one recipient 40, a privacy level of a remote database may be assessed by a different recipient 40. These different electronic resources would have different resource locators, created as described elsewhere herein.

[0039] As may be understood, the system and method disclosed herein are generally activated responsive to a request from the recipient 40. That is, the recipient 40 generally requests a specific electronic resource from the server 20, causing the server 20 to request information from the host system 30. However, alternatively and / or additionally, the server 20 may request information from the host system 30 according to a predetermined schedule. For example, a recipient may wish toAttorney Docket No. 1697P001US01 obtain weekly updates on a specific electronic resource by reassessing that specific electronic resource at the same time each week. Rather than submit a new request each week, the recipient may create a scheduled request that reaccesses the electronic resource at the predetermined time. As should be understood, the scheduled request may reuse a pre-existing resource locator when the scheduled request is run or may create a new resource locator when the scheduled request is run. As well, of course, if the location of the electronic resource on the host system changes between pre-scheduled requests, a new resource locator pointing to the new location will be required.

[0040] Additionally, the server 20 is preferably configured to authenticate the recipient 40 before facilitating any request for electronic resource(s) therefrom. Various authentication techniques, including passcodes, biometrics, multifactor authentication, automated network traffic analysis, and / or others, may be used to confirm that the recipient 40 should have access to the specific electronic resource(s) requested.

[0041] The recipient 40 may be an automated or autonomous system, such as an assessment tool for assessing parameters of the electronic resource. For example, the recipient 40 may comprise a tool for assessing Al model quality, Al model bias, etc., and may conduct regular automated / autonomous assessments of many Al models.

[0042] Another embodiment of the system is shown in Figure 3. The system 10 is similar to that shown in Figure 1. That is, in the system 10, a server 20 is in communication with a host system 30 and a recipient 40. However, as shown in Figure 3, this system 10 is also in communication with a second host system 50 which comprises a plurality of electronic resources 50a, 50b, 50c, ... 50 / 7. The server 20 can request information from either or both host systems 30, 50. As one non-limiting example, electronic resource 30a on host system 30 may be a specific dataset, while electronic resource 50c on host system 50 may be a specific Al model. The server 20 can determine and encrypt resource locators for both electronic resources 30a and 50c. Then, the server 20 can pass the encrypted resource locator for dataset 30a to host system 50, such that the Al model 50c processes the dataset 30a. The conclusions of the Al model 50c canAttorney Docket No. 1697P001US01 then be assessed by the recipient 40 and / or passed to another system. In this way, data and models that would otherwise be siloed on logically different host systems may be used together (e.g, for assessment and / or research purposes), without exposing the data or models to third parties or the public. In some implementations, further, a specific API (“Application Programming Interface”) may be developed to facilitate secure interactions with a specific model. Whether a specific API or a general API (or another access method) is used will depend on the security requirements and preferences of the users and / or data / model providers, as well as on the specific technical requirements of each specific system.

[0043] A method according to one aspect of the invention is detailed in Figure 4. At step 400, a request for location information for an electronic resource is sent to a host system. At step 410, location information for the electronic resource is received. A resource locator based on the location information is created at step 420. The resource locator is encrypted at step 430, and the encrypted version of the resource locator thereby produced is passed to the recipient at step 440.

[0044] It should be clear that the various aspects of the present invention may be implemented as software modules in an overall software system. As such, the present invention may thus take the form of computer executable instructions that, when executed, implements various software modules with predefined functions.

[0045] Additionally, it should be clear that, unless otherwise specified, any references herein to ‘image’ or to ‘images’ refer to a digital image or to digital images, comprising pixels or picture cells. Likewise, any references to an ‘audio file’ or to ‘audio files’ refer to digital audio files, unless otherwise specified. ‘Video’, ‘video files’, ‘data objects’, ‘data files’ and all other such terms should be taken to mean digital files and / or data objects, unless otherwise specified.

[0046] Embodiments of the invention may be executed by a computer processor or similar device programmed in the manner of method steps or may be executed by an electronic system which is provided with means for executing these steps. Similarly, an electronic memory means such as computer diskettes, CD-ROMs,Attorney Docket No. 1697P001US01Random Access Memory (RAM), Read Only Memory (ROM) or similar computer software storage media known in the art, may be programmed to execute such method steps. As well, electronic signals representing these method steps may also be transmitted via a communication network.

[0047] Embodiments of the invention may be implemented in any conventional computer programming language. For example, preferred embodiments may be implemented in a procedural programming language (e.g, “C” or “Go”) or an object-oriented language (e.g, “C++”, “java”, “PHP”, “PYTHON” or “C#”). Alternative embodiments of the invention may be implemented as preprogrammed hardware elements, other related components, or as a combination of hardware and software components.

[0048] Embodiments can be implemented as a computer program product for use with a computer system. Such implementations may include a series of computer instructions fixed either on a tangible medium, such as a computer readable medium (e.g, a diskette, CD-ROM, ROM, or fixed disk) or transmittable to a computer system, via a modem or other interface device, such as a communications adapter connected to a network over a medium. The medium may be either a tangible medium (e.g, optical or electrical communications lines) or a medium implemented with wireless techniques (e.g, microwave, infrared or other transmission techniques). The series of computer instructions embodies all or part of the functionality previously described herein. Those skilled in the art should appreciate that such computer instructions can be written in a number of programming languages for use with many computer architectures or operating systems. Furthermore, such instructions may be stored in any memory device, such as semiconductor, magnetic, optical or other memory devices, and may be transmitted using any communications technology, such as optical, infrared, microwave, or other transmission technologies. It is expected that such a computer program product may be distributed as a removable medium with accompanying printed or electronic documentation (e.g, shrink-wrapped software), preloaded with a computer system (e.g, on system ROM or fixed disk), or distributed from a server over a network (e.g, the Internet or World Wide Web). Of course, some embodiments of the invention may be implementedAttorney Docket No. 1697P001US01 as a combination of both software (e.g, a computer program product) and hardware. Still other embodiments of the invention may be implemented as entirely hardware, or entirely software (e.g, a computer program product).

[0049] A person understanding this invention may now conceive of alternative structures and embodiments or variations of the above all of which are intended to fall within the scope of the invention as defined in the claims that follow.

Claims

Attorney Docket No. 1697P001US01We claim:

1. A method for facilitating secure access to electronic resources that are hosted on a host system, said method comprising:(a) sending, from a server, a request for information on a location of at least one of said electronic resources on said host system;(b) receiving, at said server, said information from said host system;(c) creating, at said server, at least one resource locator based on said information, said at least one resource locator thereby pointing to said location;(d) encrypting, at said server, said at least one resource locator to thereby produce an encrypted version of said at least one resource locator; and(e) passing said encrypted version of said at least one resource locator to a recipient, wherein said at least one of said electronic resources comprises at least one of: a dataset; a database; an Al model; and an interface for operating at least one Al model that is hosted on said host system, wherein said resource locator is in a format usable by said recipient, wherein said recipient is an Al assessment tool, wherein, when said recipient uses a decrypted version of said encrypted resource locator, said recipient is granted access to said at least one electronic resource, and wherein said recipient’s access to said host system is limited to said at least one electronic resource.

2. The method according to claim 1, wherein said at least one electronic resource comprises a plurality of electronic resources.Attorney Docket No. 1697P001US013. The method according to claim 2, wherein each resource locator for said plurality of electronic resources is separately encrypted.

4. The method according to claim 2, wherein:- said plurality of electronic resources comprises at least one data set and at least one Al model; and- a resource locator for said at least one data set is passed to said at least one Al model such that said Al model processes said at least one data set.

5. The method according to claim 1, wherein all of said electronic resources are hosted on a logically single host system.

6. The method according to claim 2, wherein at least two of said plurality of electronic resources are hosted on logically different host systems.

7. The method according to claim 1, wherein said method is performed responsive to a request from said recipient.

8. The method according to claim 1, wherein said location information is encrypted at said host system.

9. The method according to claim 1, wherein said at least one resource locator is a Uniform Resource Locator (URL).

10. A system for facilitating secure access to electronic resources that are hosted on a host system, said system comprising:- a server in communication with said host system, said server being configured for:- sending a request to said host system, said request requesting information on a location of at least one of said electronic resources; creating at least one resource locator based on said information, said at least one resource locator thereby pointing to said location;Attorney Docket No. 1697P001US01- encrypting said at least one resource locator to thereby produce an encrypted version of said at least one resource locator; and- passing said encrypted version of said at least one resource locator to a recipient, wherein said at least one of said electronic resources comprises at least one of: a dataset; a database; an Al model; and an interface for operating at least one Al model that is hosted on said host system, wherein said resource locator is in a format usable by said recipient, wherein said recipient is an Al assessment tool, wherein, when said recipient uses a decrypted version of said encrypted resource locator, said recipient is granted access to said at least one electronic resource, and wherein said recipient’s access to said host system is limited to said at least one electronic resource.

11. The system according to claim 10, wherein said at least one electronic resource comprises a plurality of electronic resources.

12. The system according to claim 11, wherein each resource locator for said plurality of electronic resources is separately encrypted.

13. The system according to claim 11, wherein:- said plurality of electronic resources comprises at least one data set and at least one Al model; and- a resource locator for said at least one data set is passed to said at least one Al model such that said Al model processes said at least one data set.

14. The system according to claim 10, wherein all of said electronic resources are hosted on a logically single host system.Attorney Docket No. 1697P001US0115. The system according to claim 11, wherein at least two of said plurality of electronic resources are hosted on logically different host systems.

16. The system according to claim 10, wherein said at least one resource locator is a Uniform Resource Locator (URL).

Images