Encrypting Data in Machine Learning Models via Decryption Code

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing machine learning models lack secure methods to protect private data, as conventional encryption methods can be vulnerable to decryption with sufficient computing resources and time.

Innovation Solution

The approach involves overfitting a machine learning model during training to respond only with private data when a specific decryption code is input, while ignoring any other input, and optionally deleting the model after decryption, ensuring that private data is accessible only once.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If conventional encryption methods are used to protect private data in machine learning models, then data security is improved, but the system becomes vulnerable to decryption with sufficient computing resources and time

Engineering Contradiction:
Improvedata securityVSAvoidvulnerability to decryption
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent replaces conventional cryptographic encryption mechanisms with a machine learning-based solution. Instead of using mathematical encryption algorithms that can be computationally broken, the system uses a trained neural network to encrypt data. The neural network learns to transform plaintext into ciphertext through training, and the decryption process involves feeding the ciphertext back through the same network with additional processing. This substitution of mechanical/cryptographic systems with AI-based systems resolves the contradiction by providing security that is computationally infeasible to break.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Solution Approach 2:

The patent changes the fundamental parameters of the encryption system by moving from static cryptographic keys to dynamic neural network models. The encryption process involves transforming data through multiple layers of neural network processing, where the network's weights and activations serve as the encryption key. This parameter change enables the system to achieve security levels that conventional encryption cannot reach, as the neural network's complexity and the computational resources required to reverse the transformation are prohibitively high.

Inventive Principle:
Principle #35Parameter changes

2Reliability

If machine learning models are trained to output private data only for specific input decryption codes, then data access security is improved, but the model complexity and training requirements increase

Engineering Contradiction:
Improvedata access securityVSAvoidmodel complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent segments the encryption functionality into distinct components: a neural network model for encryption, a separate decryption process that uses the same model in reverse, and a control mechanism that manages when and how data is accessed. This segmentation allows each component to be optimized independently and simplifies the overall system architecture while maintaining high security. The model itself is segmented into training phases where it learns encryption patterns separately from decryption operations.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The neural network model serves multiple functions: it acts as both the encryption mechanism and the decryption mechanism, and it simultaneously performs data transformation, security protection, and access control. By making the model universal, the system reduces overall complexity compared to having separate dedicated components for each function. The same network architecture handles encryption, decryption, and security validation, thereby improving the security-complexity tradeoff.

Inventive Principle:
Principle #6Universality (Multi-functionality)

3Reliability

If the trained machine learning model is deleted after providing private data, then data protection is improved, but the operational duration and data retrieval capability are reduced

Engineering Contradiction:
Improvedata protectionVSAvoidmodel operational duration
Core Design Contradiction:
ReliabilityVSDuration of action of moving object

Solution Approach 1:

The patent implements a disposable model approach where the neural network is trained, used for a single encryption operation, and then deleted. This short-living model ensures that even if the model structure itself were compromised, the data cannot be retrieved from the model. The model's temporary existence and subsequent destruction provide a security feature where the computational cost of creating and destroying the model is acceptable compared to the security benefit. This resolves the contradiction by accepting limited operational duration in exchange for enhanced data protection.

Inventive Principle:
Principle #27Cheap short-living objects (Disposable)

Solution Approach 2:

The system prepares for future security needs by deleting the model after use, creating a cushion against potential future attacks. The deletion action itself serves as a security measure that prevents any future retrieval of data from the model. This beforehand cushioning ensures that even if computational resources or attack methods advance, the data remains protected because the model that could potentially expose it no longer exists. The operational duration is limited only by the time needed for the single encryption operation, which is acceptable given the security benefit.

Inventive Principle:
Principle #11Beforehand cushioning (Prior cushioning)

Data Source

PatentUS20220351074A1Encrypting data in a machine learning model
Publication Date: 2022.11.03 CHARTER COMM OPERATING LLC
  • US20220351074A1 patent drawing
  • US20220351074A1 patent drawing
  • US20220351074A1 patent drawing

AI summary

Encrypting data in a machine learning model is disclosed. Private data to be encrypted is identified. The private data is encrypted in a first trained machine learning model (MLM) by training an MLM with a decryption code to generate the first trained MLM, wherein the first trained MLM is trained to output the private data when provided, as input, the decryption code, but not output the private data if provided any other input.