Methods and systems for authorizing invocation of a tool by an autonomous artificial intelligence agent

1 . A method for authorizing invocation of a tool by an autonomous artificial intelligence agent, the method comprising the steps of:

receiving, by an electronic device, a request from an autonomous artificial intelligence agent operating in the electronic device, the request for invoking a tool associated with a protected resource, the autonomous artificial intelligence agent being behaviorally bound to a person;

obtaining a fidelity signal, the fidelity signal being indicative of whether the autonomous artificial intelligence agent is behaviorally bound to the person;

obtaining an integrity signal, the integrity signal being indicative of whether execution behavior of the autonomous artificial intelligence agent is within a range expected for using the requested tool;

determining whether the request satisfies one or more policy rules at an authorization checkpoint based on at least one of the fidelity signal, the integrity signal and a context associated with the request;

in response to determining that the request satisfies the one or more policy rules, generating a delegation artifact, the delegation artifact being machine-verifiable and encoding least-privilege authorization constraints including at least a permitted action type, a scope, and a bounded validity interval; and

effecting the tool invocation request based on the delegation artifact.

2 . The method according to claim 1 , said determining step comprising:

determining the fidelity signal indicates that the autonomous artificial intelligence agent is behaviorally bound to the person;

determining the integrity signal indicates the execution behavior of the autonomous artificial intelligence agent is within the expected range; and

determining the context of the request by determining at least one of a tool identifier, an action type, a resource identifier, a requested scope, a session nonce, and an execution context.

3 . The method according to claim 1 , wherein the scope comprises at least one of:

a tool scope;

an application programming interface endpoint scope;

a function scope;

a resource scope;

a tenant scope;

an object scope; and

an account scope.

4 . The method according to claim 1 , wherein the least-privilege authorization constraints further comprise at least one of:

a rate limit;

a concurrency limit;

a maximum number of invocations;

a maximum data access volume;

a transaction constraint; and

a side-effect limit.

5 . The method according to claim 1 , wherein the bounded validity interval comprises a time-to-live that is less than a session duration of the autonomous artificial intelligence agent, said method further comprising issuing the delegation artifact per tool invocation or per short authorization window.

6 . The method of claim 1 , in response to determining that the request fails to satisfy the one or more policy rules, said method comprises:

denying the request; or

generating a constrained delegation artifact that reduces at least one of the permitted action type, the scope, or the bounded validity interval relative to the request.

7 . The method of claim 1 further comprising cryptographically binding the delegation artifact to an execution context of the autonomous artificial intelligence agent.

8 . The method according to claim 7 further comprising including, in the delegation artifact, a hash or digital signature derived from attestation evidence of a runtime environment executing the autonomous artificial intelligence agent.

9 . The method according to claim 1 , further comprising including, in the delegation artifact, a nonce, challenge-response value, or session-bound value associated with at least one of the request or the intended person to prevent replay of the delegation artifact.

10 . An electronic device for authorizing invocation of a tool by an autonomous artificial intelligence agent comprising:

a processor; and

a memory configured to store data, said electronic device being associated with a network and said memory being in communication with said processor and having instructions stored thereon which, when read and executed by said processor, cause said electronic device to:

receive a request from an autonomous artificial intelligence agent operating in the electronic device, the request for invoking a tool associated with a protected resource, the autonomous artificial intelligence agent being behaviorally bound to a person;

obtain a fidelity signal, the fidelity signal being indicative of whether the autonomous artificial intelligence agent is behaviorally bound to the person;

obtain an integrity signal, the integrity signal being indicative of whether execution behavior of the autonomous artificial intelligence agent is within a range expected for using the requested tool;

determine whether the request satisfies one or more policy rules at an authorization checkpoint based on at least one of the fidelity signal, the integrity signal and a context associated with the request;

in response to determining the request satisfies the one or more policy rules, generate a delegation artifact, the delegation artifact being machine-verifiable and encoding least-privilege authorization constraints including at least a permitted action type, a scope, and a bounded validity interval; and

effect the tool invocation request based on the delegation artifact.

11 . The electronic device according to claim 10 , wherein the instructions when read and executed by said processor, further cause said electronic device to:

determine the fidelity signal indicates that the autonomous artificial intelligence agent is behaviorally bound to the person;

determine the integrity signal indicates the execution behavior of the autonomous artificial intelligence agent is within the expected range; and

determine the context of the request by determining at least one of a tool identifier, an action type, a resource identifier, a requested scope, a session nonce, and an execution context.

12 . The electronic device according to claim 10 , wherein the scope comprises at least one of:

a tool scope;

an application programming interface endpoint scope;

a function scope;

a resource scope;

a tenant scope;

an object scope; and

an account scope.

13 . The electronic device according to claim 10 , wherein the least-privilege authorization constraints further comprise at least one of:

a rate limit;

a concurrency limit;

a maximum number of invocations;

a maximum data access volume;

a transaction constraint; and

a side-effect limit.

14 . The electronic device according to claim 10 , wherein the bounded validity interval comprises a time-to-live that is less than a session duration of the autonomous artificial intelligence agent and the instructions when read and executed by said processor, further cause said electronic device to issue the delegation artifact per tool invocation or per short authorization window.

15 . The electronic device according to claim 10 , wherein the instructions when read and executed by said processor, in response to determining that the request fails to satisfy the one or more policy rules, further cause said electronic device to:

deny the request; or

generate a constrained delegation artifact that reduces at least one of the permitted action type, the scope, or the bounded validity interval relative to the request.

16 . The electronic device according to claim 10 , wherein the instructions when read and executed by said processor further cause said electronic device to cryptographically bind the delegation artifact to an execution context of the autonomous artificial intelligence agent.

17 . The electronic device according to claim 16 , wherein the instructions when read and executed by said processor further cause said electronic device to include, in the delegation artifact, a hash or digital signature derived from attestation evidence of a runtime environment executing the autonomous artificial intelligence agent.

18 . The electronic device according to claim 10 , wherein the instructions when read and executed by said processor further cause said electronic device to include, in the delegation artifact, a nonce, challenge-response value, or session-bound value associated with at least one of the request or the intended person to prevent replay of the delegation artifact.

19 . A non-transitory computer-readable recording medium in an electronic device for authorizing invocation of a tool by an autonomous artificial intelligence (AI) agent, the non-transitory computer-readable recording medium storing instructions which when executed by a hardware processor cause the hardware processor to perform steps comprising:

receiving a request from an autonomous artificial intelligence agent operating in the electronic device, the request for invoking a tool associated with a protected resource, the autonomous artificial intelligence agent being behaviorally bound to a person;

obtaining a fidelity signal, the fidelity signal being indicative of whether the autonomous artificial intelligence agent is behaviorally bound to the person;

obtaining an integrity signal, the integrity signal being indicative of whether execution behavior of the autonomous artificial intelligence agent is within a range expected for using the requested tool;

determining whether the request satisfies one or more policy rules at an authorization checkpoint based on at least one of the fidelity signal, the integrity signal and a context associated with the request;

in response to determining the request satisfies the one or more policy rules, generating a delegation artifact, the delegation artifact being machine-verifiable and encoding least-privilege authorization constraints including at least a permitted action type, a scope, and a bounded validity interval; and

effecting the tool invocation request based on the delegation artifact.

20 . The non-transitory computer-readable recording medium according to claim 19 , wherein the instructions when read and executed by said processor, further cause the hardware processor to perform the steps comprising:

determining the fidelity signal indicates that the autonomous artificial intelligence agent is behaviorally bound to the person;

determining the integrity signal indicates the execution behavior of the autonomous artificial intelligence agent is within the expected range; and

determining the context of the request by determining at least one of a tool identifier, an action type, a resource identifier, a requested scope, a session nonce, and an execution context claim.