Adversarial Surface Patterns for Machine Vision Camouflage

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current object recognition models are vulnerable to adversarial examples that can deceive them into misclassifying objects, particularly due to poor spatial invariance and disjointed feature perception, which existing methods fail to consistently address in real-world scenarios with viewpoint shifts and camera noise.

Innovation Solution

A method using an evolutionary algorithm, such as a genetic algorithm, to determine a surface pattern for objects that exploits the weaknesses of object recognition models by generating textures through a parameterized texture model and 3D rendering, optimizing parameters to deceive object recognition software into misclassifying the object by rendering images from multiple viewpoints and varying environmental conditions.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If standard adversarial example generation methods are used, then object recognition models can be deceived in controlled settings, but they fail to consistently fool classifiers in real-world scenarios with viewpoint shifts and camera noise

Engineering Contradiction:
Improveadversarial example effectivenessVSAvoidrobustness to viewpoint shifts and environmental conditions
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent applies dynamics by making the adversarial pattern adaptive rather than static. The evolutionary algorithm continuously optimizes the texture pattern based on feedback from object recognition models, allowing the pattern to evolve and adapt to different viewing conditions, camera noises, and environmental transformations that were previously causing failure

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The patent implements feedback by using the object recognition model's classification results as feedback signals to guide the evolutionary optimization process. The fitness function evaluates how successfully the current texture pattern deceives the classifier, and this feedback drives the selection and mutation operations in the evolutionary algorithm to improve adversarial effectiveness

Inventive Principle:
Principle #23Feedback

2Reliability

If evolutionary algorithms are used to optimize surface patterns, then robust camouflage against machine vision can be achieved, but computational complexity and processing time increase

Engineering Contradiction:
Improvecamouflage effectivenessVSAvoidcomputational complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent applies self-service by using the object recognition model itself as part of the optimization loop. The same classifier that needs to be deceived is used to evaluate and guide the evolution of the adversarial pattern, eliminating the need for separate evaluation systems and reducing overall system complexity despite the iterative process

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The patent applies parameter changes by optimizing the texture parameters of the surface pattern through evolutionary algorithms. By representing the texture as a set of adjustable parameters and evolving these parameters to maximize adversarial effectiveness, the system achieves robust camouflage while maintaining computational tractability through parameterized representation

Inventive Principle:
Principle #35Parameter changes

Data Source

PatentUS11763579B2Obtaining patterns for surfaces of objects
Publication Date: 2023.09.19 THE SEC OF STATE FOR DEFENCE IN HER BRITANNIC MAJESTYS GOVERNMENT OF THE UK OF GREAT BRITAIN & NORTHERN IRELAND
  • US11763579B2 patent drawing
  • US11763579B2 patent drawing
  • US11763579B2 patent drawing

AI summary

A method, computer system and computer-readable medium for determining a surface pattern for a target object using an evolutionary algorithm such as a genetic algorithm, a parameterized texture-generating function, a 3D renderer for rendering images of a 3D model of the target object with a texture obtained from the parameterized texture generating function, and an object recognition model to process the images and predict whether or not the image contains an object of the target object's type or category. Sets of parameters are generated using the evolutionary algorithm and the accuracy of the object recognition model's prediction of the images with the 3D model textured according to each set of parameters is used to determine a fitness score, by which sets of parameters are scored for the purpose of obtaining future further generations of sets of parameters, such as by genetic algorithm operations such as mutation and crossover operations. The surface pattern is obtained based on the images of the 3D model rendered with a surface texture generated according to a high-scoring set of parameters.