Dialog System Signed Model Steganographic Signature

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing speech-to-text recognition systems lack effective protection against misappropriation of proprietary information, as unsigned models can be easily copied and used without authorization, leading to potential intellectual property theft and unauthorized use.

Innovation Solution

The implementation of signed models that incorporate steganographic signatures, which are triggered by unusual inputs and produce distinctive outputs, allowing for the detection of misappropriation without degrading normal model performance, even when the signature is difficult to find and remove.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of manufacture

If unsigned models are used in speech-to-text recognition systems, then the system is easier to implement and distribute, but the system becomes vulnerable to misappropriation and unauthorized use of proprietary information

Engineering Contradiction:
Improveease of model distributionVSAvoidprotection against misappropriation
Core Design Contradiction:
Ease of manufactureVSReliability

Solution Approach 1:

The patent applies preliminary action by embedding steganographic signatures into models before distribution. This allows the system to maintain ease of distribution while protecting against misappropriation, as the protection mechanism is already in place before any potential theft occurs. The signature is hidden within the model itself, requiring no additional infrastructure at distribution time.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The steganographic signature acts as an intermediary element that bridges the gap between model distribution and protection. It is embedded within the model data structure and serves as a detectable marker that enables verification of model origin and integrity without interfering with the model's functional operation.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If steganographic signatures are embedded in models to detect misappropriation, then protection against theft is improved, but the model complexity increases

Engineering Contradiction:
Improvedetection of misappropriationVSAvoidmodel structure complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent applies local quality by embedding signatures in specific localized portions of the model rather than throughout the entire structure. The signature is placed in a dedicated field within the data structure, allowing the rest of the model to maintain its original simplicity and functionality while incorporating protection capabilities.

Inventive Principle:
Principle #3Local quality

3Reliability

If behavioral tests are implemented to verify model authenticity, then authorization verification is improved, but the operational time increases

Engineering Contradiction:
Improveauthorization verificationVSAvoidverification processing time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent replaces complex verification mechanisms with a simpler signature-based verification system. Instead of implementing comprehensive behavioral tests that would require extensive processing time, the system uses steganographic signatures that can be verified through straightforward pattern matching, dramatically reducing verification time while maintaining reliability.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Data Source

PatentUS9208788B2Method and apparatus for responding to a query at a dialog system
Publication Date: 2015.12.08 MICROSOFT TECHNOLOGY LICENSING LLC
  • US9208788B2 patent drawing
  • US9208788B2 patent drawing
  • US9208788B2 patent drawing

AI summary

A dialog system is accessed by a remote user and is typically configured to receive a natural language query from the user and return a natural language answer to the user. Dialog systems can be copied without authorization or can become an out-of-date version. A dialog system with a signature, referred to herein as a “signed” dialog system, can indicate the signature without affecting usage by users who are unaware that the dialog system contains the signature. The signed dialog system can respond to input such that only the designer of the dialog system knows the signature is embedded in the dialog system. The response is a way to check the source or other characteristics of the dialog system. A designer of signed dialog systems can prove whether an unauthorized copy of the signed dialog system is used by a third party by using publically-available user interfaces.