Encrypting Data in Machine Learning Models via Decryption Code
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing machine learning models lack secure methods to protect private data, as conventional encryption methods can be vulnerable to decryption with sufficient computing resources and time.
Innovation Solution
The approach involves overfitting a machine learning model during training to respond only with private data when a specific decryption code is input, while ignoring any other input, and optionally deleting the model after decryption, ensuring that private data is accessible only once.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional encryption methods are used to protect private data in machine learning models, then data security is improved, but the system becomes vulnerable to decryption with sufficient computing resources and time
Solution Approach 1:
The patent replaces conventional cryptographic encryption mechanisms with a machine learning-based solution. Instead of using mathematical encryption algorithms that can be computationally broken, the system uses a trained neural network to encrypt data. The neural network learns to transform plaintext into ciphertext through training, and the decryption process involves feeding the ciphertext back through the same network with additional processing. This substitution of mechanical/cryptographic systems with AI-based systems resolves the contradiction by providing security that is computationally infeasible to break.
Solution Approach 2:
The patent changes the fundamental parameters of the encryption system by moving from static cryptographic keys to dynamic neural network models. The encryption process involves transforming data through multiple layers of neural network processing, where the network's weights and activations serve as the encryption key. This parameter change enables the system to achieve security levels that conventional encryption cannot reach, as the neural network's complexity and the computational resources required to reverse the transformation are prohibitively high.
2Reliability
If machine learning models are trained to output private data only for specific input decryption codes, then data access security is improved, but the model complexity and training requirements increase
Solution Approach 1:
The patent segments the encryption functionality into distinct components: a neural network model for encryption, a separate decryption process that uses the same model in reverse, and a control mechanism that manages when and how data is accessed. This segmentation allows each component to be optimized independently and simplifies the overall system architecture while maintaining high security. The model itself is segmented into training phases where it learns encryption patterns separately from decryption operations.
Solution Approach 2:
The neural network model serves multiple functions: it acts as both the encryption mechanism and the decryption mechanism, and it simultaneously performs data transformation, security protection, and access control. By making the model universal, the system reduces overall complexity compared to having separate dedicated components for each function. The same network architecture handles encryption, decryption, and security validation, thereby improving the security-complexity tradeoff.
3Reliability
If the trained machine learning model is deleted after providing private data, then data protection is improved, but the operational duration and data retrieval capability are reduced
Solution Approach 1:
The patent implements a disposable model approach where the neural network is trained, used for a single encryption operation, and then deleted. This short-living model ensures that even if the model structure itself were compromised, the data cannot be retrieved from the model. The model's temporary existence and subsequent destruction provide a security feature where the computational cost of creating and destroying the model is acceptable compared to the security benefit. This resolves the contradiction by accepting limited operational duration in exchange for enhanced data protection.
Solution Approach 2:
The system prepares for future security needs by deleting the model after use, creating a cushion against potential future attacks. The deletion action itself serves as a security measure that prevents any future retrieval of data from the model. This beforehand cushioning ensures that even if computational resources or attack methods advance, the data remains protected because the model that could potentially expose it no longer exists. The operational duration is limited only by the time needed for the single encryption operation, which is acceptable given the security benefit.
Data Source
AI summary
Encrypting data in a machine learning model is disclosed. Private data to be encrypted is identified. The private data is encrypted in a first trained machine learning model (MLM) by training an MLM with a decryption code to generate the first trained MLM, wherein the first trained MLM is trained to output the private data when provided, as input, the decryption code, but not output the private data if provided any other input.


