Agent-to-agent communication security protocol for artificial intelligence agents with translation layer enforcement
Aspects of the present disclosure relate to protocols and systems for facilitating agent-to-agent communications in an agentic artificial intelligence (AI) system. Embodiments include establishing a schema for a first AI agent and a second AI agent based on a communication process between the first AI agent and the second AI agent. Embodiments further include configuring a translation component to interface between the first AI agent and the second AI agent based on the schema. Embodiments further include using the configured translation component to generate a secure version of a prompt generated by the first AI agent. Embodiments further include providing the secure version of the prompt as input to the second AI agent. In some embodiments, cryptographic techniques such as watermarking and establishing encrypted communication channels are used to provide additional security for agent-to-agent interactions.
1 . A method, comprising:
establishing a schema for a first artificial intelligence (AI) agent and a second AI agent based on a communication process between the first AI agent and the second AI agent;
configuring a translation component to interface between the first AI agent and the second AI agent based on the schema;
generating a natural language prompt via the first AI agent;
generating an intermediate representation of the natural language prompt via the translation component;
generating a secure version of the natural language prompt via the translation component based on the intermediate representation; and
providing the secure version of the natural language prompt as input to the second AI agent.
2 . The method of claim 1 , wherein the communication process involves determining actions performable by the second AI agent and the schema is established based on the determining.
3 . The method of claim 1 , wherein the intermediate representation comprises a representation of the natural language prompt in terms of the schema.
4 . The method of claim 1 , wherein the translation component comprises a first translation layer that generates the intermediate representation and a second translation layer that generates the secure version of the natural language prompt.
5 . The method of claim 4 , wherein the second translation layer generates the secure version of the natural language prompt based on replacing a token of the intermediate representation with text that corresponds to the token.
6 . The method of claim 1 , further comprising embedding a cryptographic watermark into the secure version of the natural language prompt at the translation component, wherein the secure version of the natural language prompt is provided to the second AI agent based on verifying the cryptographic watermark.
7 . The method of claim 1 , further comprising establishing an encrypted communication channel between the first AI agent and the second AI agent prior to the communication process.
8 . The method of claim 1 , further comprising generating, via the second AI agent, a response to the secure version of the natural language prompt.
9 . A method, comprising:
establishing a schema for a first artificial intelligence (AI) agent and a second AI agent based on a communication process between the first AI agent and the second AI agent;
configuring a translation component to interface between the first AI agent and the second AI agent based on the schema;
using the configured translation component to generate a secure version of a prompt generated by the first AI agent; and
providing the secure version of the prompt as input to the second AI agent.
10 . The method of claim 9 , wherein the configured translation component generates the secure version of the prompt based on filtering tokens from the prompt that are not defined in the schema.
11 . The method of claim 9 , wherein the configured translation component generates the secure version of the prompt based on translating the prompt into an intermediate representation comprising tokens defined in the schema.
12 . The method of claim 9 , further comprising embedding a cryptographic watermark into the secure version of the prompt at the translation component, wherein the secure version of the prompt is provided to the second AI agent based on verifying the cryptographic watermark.
13 . The method of claim 9 , further comprising establishing an encrypted communication channel between the first AI agent and the second AI agent prior to the communication process.
14 . The method of claim 9 , wherein the first AI agent and the second AI agent are trained to generate responses and outputs in terms of established schemas.
15 . A system, comprising:
one or more processors; and
a memory comprising instructions that, when executed by the one or more processors, cause the system to:
establish a schema for a first artificial intelligence (AI) agent and a second AI agent based on a communication process between the first AI agent and the second AI agent;
configure a translation component to interface between the first AI agent and the second AI agent based on the schema;
use the configured translation component to generate a secure version of a prompt generated by the first AI agent; and
provide the secure version of the prompt as input to the second AI agent.
16 . The system of claim 15 , wherein the communication process involves determining actions performable by the second AI agent and the schema is established based on the determining.
17 . The system of claim 15 , wherein the configured translation component generates the secure version of the prompt based on filtering tokens from the prompt that are not defined in the schema.
18 . The system of claim 15 , wherein the first AI agent and the second AI agent are trained to generate responses and outputs in terms of established schemas.
19 . The system of claim 15 , wherein the instructions further cause the system to embed a cryptographic watermark into the secure version of the prompt at the translation component, wherein the secure version of the prompt is provided to the second AI agent based on verifying the cryptographic watermark.
20 . The system of claim 15 , wherein the instructions further cause the system to establish an encrypted communication channel between the first AI agent and the second AI agent prior to the communication process.