IP Library Granted Patent US 12,694,331
Granted Patent B2
US 12,694,331 · App. 17/931,803 · Granted Jul 28, 2026

Sufficiency assessment of machine learning models through maximum deviation

Inventors: Dennis Wei (Sunnyvale, CA); Rahul Nair (Dublin, IE); Amit Dhurandhar (Yorktown Heights, NY); Kush Raj Varshney (Chappaqua, NY); Elizabeth Daly (Dublin, IE); Moninder Singh (Farmington, CT); Michael Hind (Cortlandt Manor, NY)
Assignee: INTERNATIONAL BUSINESS MACHINES CORPORATION
G06N20/00G06N5/01
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,694,331
App. No.
17/931,803
Filed
Sep 13, 2022
Granted
Jul 28, 2026
Kind
B2
Art Unit
2146
USPC
706/12
Abstract

Techniques regarding determining sufficiency of one or more machine learning models are provided. For example, one or more embodiments described herein can comprise a system, which can comprise a memory that can store computer executable components. The system can also comprise a processor, operably coupled to the memory, and that can execute the computer executable components stored in memory. The computer executable components can comprise a measurement component that measures maximum deviation of a supervised learning model from a reference model over a certification set and an analysis component that determines sufficiency of the supervised learning model based at least in part on the maximum deviation.

Claims (219)

1 . A system, comprising:

a memory that stores computer executable components including a certification set of machine-readable inputs defining a bounded region of an input feature space over which model behavior is evaluated; and

a processor, operably coupled to the memory, and that executes the computer executable components stored in the memory, wherein the computer executable components comprise:

a measurement component that computationally evaluates, using the stored certification set, a maximum deviation of a supervised learning model from a reference model by exhaustively evaluating and provably bounding deviations over the certification set rather than by sampling or empirical validation;

wherein the supervised learning model comprises a tree ensemble, and the measurement component employs one or more discrete optimization techniques to exploit composition in terms of trees to provide anytime bounds on the maximum deviation;

wherein the measurement component constructs a representation of leaf regions of the tree ensemble, identifies candidate combinations of leaves drawn from respective trees whose feature-space regions are mutually compatible, computes a deviation associated with each candidate combination, and uses bounding techniques to prune candidate combinations to determine the maximum deviation; and

an analysis component that determines sufficiency of the supervised learning model based at least in part on the maximum deviation satisfying a predefined certification criterion, and that outputs a machine-readable sufficiency notification that automatically governs retraining of the supervised learning model within a computing environment, and

wherein the system thereby provides a pre-deployment computational certification of model reliability that is independent of training accuracy or test-set performance;

wherein the system automatically controls deployment of the model into a computing environment as a function of the certification.

2 . The system of claim 1 , wherein the certification set is a subset of an input space of the supervised learning model.

3 . The system of claim 1 , wherein for a bipartite graph, with z nodes representing leaves l of/on one side and L G nodes representing leaves 0m of ƒ 0 on the other, the measurement component defines an edge set ε={(l, m): l ∩ 0m ∩ ≠Ø}; where |ε|≤L 0 L, where ƒ and ƒ 0 are decision trees with L and L 0 leaves respectively, and ε is a bipartite edge set of leaf intersections, the maximum deviation can be computed with |ε| evaluations as

max

x

𝒞

D

(

f

(

x

)

,

f

0

(

x

)

)

=

max

(

l

,

m

)

D

(

y

l

,

y

0

m

)

.

4 . The system of claim 1 , wherein the analysis component identifies inputs that lead to a deviation greater than a threshold value.

5 . The system of claim 1 , wherein the analysis component for the supervised learning model ƒ, which is a function mapping an input feature space to an output space , determines sufficiency of the supervised learning model by determining its worst-case deviation from the reference model ƒ 0 : wherein for a measure of deviation D: × ← , where + is the set of non-negative reals, and the certification set ⊆ over which the deviation is maximized, the analysis solves:

max

x

𝒞

D

(

f

(

x

)

,

f

0

(

x

)

)

.

6 . The system of claim 1 , wherein the analysis component determines if deviation of the supervised learning model from the reference model over the certification set exceeds a threshold value, and identifies a set of inputs with deviation greater than the threshold value.

7 . A computer-implemented method, comprising:

measuring, by a processor, a maximum deviation metric of a supervised learning model from a reference model by exhaustively evaluating and provably bounding deviations over a certification set of machine-readable inputs stored in memory, the certification set defining a bounded subset of an input feature space over which model behavior is evaluated;

wherein the supervised learning model comprises a tree ensemble, and the measurement component employs one or more discrete optimization techniques to exploit composition in terms of trees to provide anytime bounds on the maximum deviation;

wherein the measurement component constructs a representation of leaf regions of the tree ensemble, identifies candidate combinations of leaves drawn from respective trees whose feature-space regions are mutually compatible, computes a deviation associated with each candidate combination, and uses bounding techniques to prune candidate combinations to determine the maximum deviation; and

using the processor to determine sufficiency of the supervised learning model based at least in part on whether the maximum deviation metric satisfies a predefined certification criterion, and generating, by the processor, a machine-readable sufficiency notification that is consumed by an automated control process to selectively initiate retraining of the supervised learning model within a computing environment;

wherein the method provides a pre-deployment computational certification of model reliability independently of training loss, validation accuracy, or empirical test-set performance of the supervised learning model;

wherein the system automatically controls deployment of the model into a computing environment as a function of the certification.

8 . The computer-implemented method of claim 7 , wherein the certification set is a subset of an input space of the supervised learning model.

9 . The computer-implemented method of claim 7 , wherein for a bipartite graph, with L nodes representing leaves l of ƒ on one side and L 0 nodes representing leaves 0m of ƒ 0 on the other, the processor defines an edge set ε={(l,m): l ∩ 0m ∩ ≠Ø}; where |ε|≤L 0 L, where ƒ and ƒ 0 are decision trees with L and L 0 leaves respectively, and ε is a bipartite edge set of leaf intersections, computes the maximum deviation with |ε| evaluations as

max

x

𝒞

D

(

f

(

x

)

,

f

0

(

x

)

)

=

max

(

l

,

m

)

D

(

y

l

,

y

0

m

)

.

10 . The computer-implemented method of claim 7 , further comprising:

identifying inputs that lead to deviation greater than a threshold.

11 . The computer-implemented method of claim 7 , wherein the processor for the supervised learning model ƒ, which is a function mapping an input feature space to an output space , determines sufficiency of the supervised learning model by determining its worst-case deviation from the reference model ƒ 0 : wherein for a measure of deviation D: × + where , is the set of non-negative reals, and the certification set ⊆ over which the deviation is maximized, the analysis solves:

max

x

𝒞

D

(

f

(

x

)

,

f

0

(

x

)

)

.

12 . The computer-implemented method of claim 7 , wherein the processor determines if deviation of the supervised learning model from the reference model over the certification set exceeds a threshold value, and identifies a set of inputs with deviation greater than the threshold value.

13 . A non-transitory computer program product for determining sufficiency of a supervised learning model, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions executable by a processor to cause the processor to:

measure a maximum deviation metric of the supervised learning model from a reference model by exhaustively evaluating and provably bounding deviations over a certification set of machine-readable inputs stored in memory, the certification set corresponding to a bounded subset of an input feature space over which model behavior is evaluated;

wherein the supervised learning model comprises a tree ensemble, and the measurement component employs one or more discrete optimization techniques to exploit composition in terms of trees to provide anytime bounds on the maximum deviation;

wherein the measurement component constructs a representation of leaf regions of the tree ensemble, identifies candidate combinations of leaves drawn from respective trees whose feature-space regions are mutually compatible, computes a deviation associated with each candidate combination, and uses bounding techniques to prune candidate combinations to determine the maximum deviation; and

determine sufficiency of the supervised learning model based at least in part on whether the maximum deviation metric satisfies a predefined certification criterion, and generate a machine-readable sufficiency notification configured to be consumed by an automated model-governance process to selectively trigger retraining of the supervised learning model within a computing environment;

wherein the program instructions implement a pre-deployment computational certification of model reliability independently of training loss, validation accuracy, or empirical test-set performance of the supervised learning model;

wherein the system automatically controls deployment of the model into a computing environment as a function of the certification.

14 . The computer program product of claim 13 , wherein the certification set is a subset of an input space of the supervised learning model.

15 . The computer program product of claim 13 , wherein the program instructions further cause the processor to for a bipartite graph, with L nodes representing leaves L l of ƒ on one side and L 0 nodes representing leaves 0m of ƒ 0 on the other, define an edge set ε={(l,m): ∩ 0m ∩ ≠Ø}; where [ε]≤L 0 L, where ƒ and ƒ 0 are decision trees with L and L 0 leaves respectively, and ε is a bipartite edge set of leaf intersections, and compute the maximum deviation with [ε] evaluations as

max

x

𝒞

D

(

f

(

x

)

,

f

0

(

x

)

)

=

max

(

l

,

m

)

D

(

y

l

,

y

0

m

)

.

16 . The computer program product of claim 13 , wherein the program instructions further cause the processor to identify inputs that lead to a deviation greater than a threshold value.

17 . The computer program product of claim 13 , wherein the program instructions further cause the processor to for the supervised learning model ƒ, which is a function mapping an input feature space to an output space , determine sufficiency of the supervised learning model by determining its worst-case deviation from the reference model ƒ 0 : wherein for a measure of deviation D: × + where + is the set of non-negative reals, and the certification set ⊆ over which the deviation is maximized, the analysis solves:

max

x

𝒞

D

(

f

(

x

)

,

f

0

(

x

)

)

.

18 . The computer program product of claim 13 , wherein the program instructions further cause the processor to determine if deviation of the supervised learning model from the reference model over the certification set exceeds a threshold value, and identifies a set of inputs with deviation greater than the threshold value.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 13, 2022
From: WEI, DENNIS; NAIR, RAHUL; DHURANDHAR, AMIT; VARSHNEY, KUSH RAJ; DALY, ELIZABETH; SINGH, MONINDER; HIND, MICHAEL
To: INTERNATIONAL BUSINESS MACHINES CORPORATION
Reel/Frame 061081/0177 →
Continuity (1)
Related Publication 20240095575A1 · Mar 21, 2024
References Cited (58)
US 11481692B2 · Sato · 2022 [cited by examiner]
US 11886955B2 · David · 2024 [cited by examiner]
US 11977836B1 · Archambeau · 2024 [cited by examiner]
US 12061310B2 · Silva · 2024 [cited by examiner]
US 12199429B2 · Wan · 2025 [cited by examiner]
US 12242613B2 · Sinn · 2025 [cited by examiner]
US 12316610B1 · Muth · 2025 [cited by examiner]
US 12346832B2 · Tater · 2025 [cited by examiner]
US 20150363838A1 · Wu · 2015 [cited by examiner]
US 20170083003A1 · Arisoy · 2017 [cited by examiner]
US 20190156227A1 · Duke et al. · 2019 [cited by applicant]
US 20210107109A1 · Wang et al. · 2021 [cited by applicant]
US 20210178600A1 · Jha et al. · 2021 [cited by applicant]
US 20220156578A1 · Allahdadian · 2022 [cited by examiner]
US 20220207420A1 · Sharma · 2022 [cited by examiner]
US 20230177118A1 · Ba · 2023 [cited by examiner]
US 20240152820A1 · Singh · 2024 [cited by examiner]
US 20250069750A1 · Foschini · 2025 [cited by examiner]
US 20250123015A1 · Cantrell · 2025 [cited by examiner]
AU 2021107109A4 · 2021 [cited by applicant]
CA 3068198A1 · 2019 [cited by examiner]
CA 3091917A1 · 2019 [cited by examiner]
CA 3128957A1 · 2020 [cited by examiner]
CA 3119273A1 · 2020 [cited by examiner]
CA 3140586A1 · 2020 [cited by examiner]
CA 3207065A1 · 2022 [cited by examiner]
CA 3220786A1 · 2022 [cited by examiner]
CA 3223673A1 · 2023 [cited by examiner]
CA 2894317C · 2023 [cited by examiner]
CN 109617122A · 2019 [cited by applicant]
CN 110070131A · 2019 [cited by applicant]
CN 106919769B · 2020 [cited by examiner]
CN 111666631A · 2020 [cited by applicant]
CN 112733270A · 2021 [cited by applicant]
CN 108599154B · 2021 [cited by examiner]
CN 114019909A · 2022 [cited by applicant]
CN 114357882A · 2022 [cited by examiner]
CN 112600921B · 2022 [cited by examiner]
CN 114583746A · 2022 [cited by applicant]
CN 115210771A · 2022 [cited by examiner]
CN 115485696A · 2022 [cited by examiner]
CN 115529278A · 2022 [cited by examiner]
CN 109741797B · 2023 [cited by examiner]
FR 2908657A1 · 2008 [cited by examiner]
SG 10201913208 · 2020 [cited by examiner]
WO WO2008008919A2 · 2008 [cited by examiner]
WO WO2022155292A1 · 2022 [cited by examiner]
WO WO2022171788A1 · 2022 [cited by examiner]
WO WO2023191787A1 · 2023 [cited by examiner]
Chen et al, “Robustness Verification of Tree-based Models,” 33rd Conference on Neural Information Processing Systems (NeurIPS 2019), Vancouver, Canada (Year: 2019). [cited by examiner]
Amodei, D. et al. | “Concrete problems in AI safety”. arXiv:1606.06565v2 [cs.AI] Jul. 25, 2016, 29 pages. [cited by applicant]
Huang, X. et al. | “A survey of safety and trustworthiness of deep neural networks: Verification, testing, adversarial attack and defence, and interpretability”. arXiv:1812.08342v5 [cs.LG] May 31, 2020, 95 pages. [cited by applicant]
Inala, J. P et al. | “Synthesizing programmatic policies that inductively generalize”. In International Conference on Learning Representations, 2020. URL https://openreview.net/forum?id=S1I8oANFDH, last accessed Aug. 25… [cited by applicant]
Raghunathan, A. et al. | “Certified defenses against adversarial examples”. arXiv:1801.09344v2 [cs.LG] Oct. 31, 2020, 15 pages. [cited by applicant]
Rupprecht, Ch. et al. | “Finding and visualizing weaknesses of deep reinforcement learning agents”. In International Conference on Learning Representations, 2020. URL https://openreview.net/forum?id=rylvYaNYDH, last acc… [cited by applicant]
Wong, E. et al. | “Provable defenses against adversarial examples via the convex outer adversarial polytope”. In International Conference on Machine Learning, pp. 5286-5295. PMLR, 2018, 10 pages. [cited by applicant]
Zhu, H. et al. | “An inductive synthesis framework for verifiable reinforcement learning.” In Proceedings of the 40th ACM SIGPLAN Conference on Programming Language Design and Implementation, pp. 686-701, Phoenix, AZ, U… [cited by applicant]
Anonymous | “On the Safety of Interpretable Machine Learning: A Maximum Deviation Approach”. Submitted to 36th Conference on Neural Information Processing Systems (NeurIPS 2022), 47 pages. [cited by applicant]