Electronic device for performing computation based on artificial intelligence model and operation method thereof

1 . An electronic device comprising:

a memory storing instructions; and

at least one processor, wherein the at least one processor is configured to perform an operation based on a plurality of execution environments, the plurality of execution environments comprising a rich execution environment and a trusted execution environment, and the instructions which, when executed by the at least one processor, cause the electronic device to:

by applying a noise value to weight values of at least a part of a plurality of layers included in an artificial intelligence model stored in the electronic device in the trusted execution environment, obtain the weight values to which the noise value is applied, and

when an event for executing the artificial intelligence model is identified,

obtain computation data by computing, in the rich execution environment, data input to the at least a part of the plurality of layers, by using the weight values to which the noise value is applied, and

obtain output data, based on the obtained computation data and the applied noise value, in the trusted execution environment,

wherein a first part of the memory is assigned to the rich execution environment and a second part of the memory is assigned to the trusted execution environment,

wherein the artificial intelligence model is stored in the second part of the memory and the second part is not accessible to the at least one processor in the rich execution environment, and

wherein the first part of the memory is accessible to the at least one processor in the rich execution environment and in the trusted execution environment.

2 . The electronic device of claim 1 ,

wherein the instructions which, when executed by the at least one processor, cause the electronic device to:

generate, in the trusted execution environment, the noise value.

3 . The electronic device of claim 1 ,

wherein the instructions which, when executed by the at least one processor, cause the electronic device to:

store, in the trusted execution environment, the weight values to which the noise value is applied, in the first part of the memory; and

obtain, in the rich execution environment, the weight values to which the noise value is applied by accessing the first part of the memory.

4 . The electronic device of claim 3 , wherein the instructions which, when executed by the at least one processor, cause the electronic device to:

select the noise value from among values within a designated range, and the values within the designated range comprise values smaller than 0.9 or values equal to or larger than 1.1.

5 . The electronic device of claim 1 , further comprising a plurality of computation devices for performing computation based on the artificial intelligence model, wherein the plurality of computation devices are assigned to the rich execution environment among the plurality of execution environments,

wherein the instructions which, when executed by the at least one processor, cause the electronic device to:

compute, in the rich execution environment by using the plurality of computation devices, the data input to the at least a part of the plurality of layers, based on the weight values to which the noise value is applied.

6 . The electronic device of claim 1 , wherein the instructions which, when executed by the at least one processor, cause the electronic device to:

generate, in the trusted execution environment, first noise values corresponding to input data to be input to the at least a part of the plurality of layers.

7 . The electronic device of claim 6 , wherein the instructions which, when executed by the at least one processor, cause the electronic device to:

generate each of the first noise values, by randomly selecting a value from a range of values of the input data.

8 . The electronic device of claim 6 , wherein the instructions which, when executed by the at least one processor, cause the electronic device to:

when the event for executing the artificial intelligence model is identified, by applying the first noise values to the data input to the at least a part of the plurality of layers in the trusted execution environment, obtain the data to which the first noise values are applied, and

change, based on the obtaining of the data to which the first noise values are applied, an execution environment of the electronic device from the trusted execution environment to the rich execution environment.

9 . The electronic device of claim 8 , wherein the instructions which, when executed by the at least one processor, cause the electronic device to:

compute, in the rich execution environment, based on the weight values to which the noise value is applied, the data to which the first noise values are applied.

10 . The electronic device of claim 6 , wherein the instructions which, when executed by the at least one processor, cause the electronic device to:

generate, based on the weight values of the at least a part of the plurality of layers of the artificial intelligence model, the first noise values, and a bias, first values in the trusted execution environment, and

pre-store the generated first values in a part of the memory.

11 . The electronic device of claim 10 , wherein the instructions which, when executed by the at least one processor, cause the electronic device to:

obtain the output data, based on computation of the pre-stored first values and the computation data obtained in the rich execution environment.

12 . The electronic device of claim 1 , wherein the instructions which, when executed by the at least one processor, cause the electronic device to:

identify a state of the electronic device, and

generate the noise value in the trusted execution environment when the state of the electronic device corresponds to an idle state.

13 . The electronic device of claim 12 , wherein the instructions which, when executed by the at least one processor, cause the electronic device to:

identify a number of layers for which the noise value is generated, among the plurality of layers of the artificial intelligence model;

select, based on the identified number of layers being smaller than a preset value, a partial layer from among layers for which no noise value is generated; and

generate the noise value associated with the selected partial layer.

14 . The electronic device of claim 13 , wherein the instructions which, when executed by the at least one processor, cause the electronic device to:

refrain from generating the noise value associated with a first layer among the plurality of layers of the artificial intelligence model.

15 . The electronic device of claim 1 , wherein the instructions which, when executed by the at least one processor, cause the electronic device to:

when the event is identified, identify whether the noise value for the at least a part of the plurality of layers of the artificial intelligence model is stored in the electronic device,

compute, based on the weight values of the at least a part of the plurality of layers, the data input to the part of the plurality of layers, in the trusted execution environment when no noise value is stored in the electronic device, and

compute, based on the weight values of the at least a part of the plurality of layers to which the noise value is applied, the data input to the part of the plurality of layers, in the rich execution environment when the noise value is stored in the electronic device.

16 . An operation method of an electronic device comprising a memory and at least one processor, the at least one processor being configured to perform an operation based on a plurality of execution environments, the plurality of execution environments comprising a rich execution environment and a trusted execution environment, the method comprising:

by applying a noise value to weight values of at least a part of a plurality of layers included in an artificial intelligence model stored in the electronic device, obtaining the weight values to which the noise value is applied in the trusted execution environment; and

when an event for executing the artificial intelligence model is identified,

obtaining computation data by computing, in the rich execution environment, data input to the at least a part of the plurality of layers, by using the weight values to which the noise value is applied; and

obtaining output data, based on the obtained computation data and the applied noise value, in the trusted execution environment,

wherein a first part of the memory is assigned to the rich execution environment, and a second part of the memory is assigned to the trusted execution environment,

wherein the artificial intelligence model is stored in the second part of the memory and the second part is not accessible to the at least one processor in the rich execution environment, and

wherein the first part of the memory is accessible to the at least one processor in the rich execution environment and in the trusted execution environment.

17 . The method of claim 16 , further comprising:

generating, in the trusted execution environment, the noise value.

18 . The method of claim 17 , further comprising:

storing, in the trusted execution environment, the weight values to which the noise value is applied, in the first part of the memory; and

obtaining the weight values to which the noise value is applied by accessing the first part of the memory, in the rich execution environment.

19 . The method of claim 18 , wherein the noise value is configured to be selected from among values within a designated range, and

wherein the values within the designated range comprise values smaller than 0.9 or values equal to or larger than 1.1.

20 . A non-transitory storage medium storing computer-readable instructions which, when executed by at least one processor of an electronic device, cause the electronic device to perform operations, the operations comprising:

by applying a noise value to weight values of at least a part of a plurality of layers included in an artificial intelligence model stored in the electronic device, obtaining the weight values to which the noise value is applied in a trusted execution environment; and

when an event for executing the artificial intelligence model is identified,

obtaining computation data by computing, in a rich execution environment, data input to the at least a part of the plurality of layers, by using the weight values to which the noise value is applied; and

obtaining output data, based on the obtained computation data and the applied noise value, in the trusted execution environment,

wherein a first part of a memory is assigned to the rich execution environment and a second part of the memory is assigned to the trusted execution environment,

wherein the artificial intelligence model is stored in the second part of the memory and the second part is not accessible to the at least one processor in the rich execution environment, and

wherein the first part of the memory is accessible to the at least one processor in the rich execution environment and in the trusted execution environment.