IP Library › Granted Patent US 12,235,903
Granted Patent B2
US 12,235,903 · App. 17/118,601 · Granted Feb 25, 2025

Adversarial hardening of queries against automated responses

Inventors: Ambrish Rawat (Dublin, IE); Jonathan Peter Epperlein (Phibsborough, IE)
Assignee: International Business Machines Corporation
G06F16/9035G06F9/3836G06F16/90335G06F16/9536
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,235,903
App. No.
17/118,601
Granted
Feb 25, 2025
Kind
B2
Abstract

A system, computer program product, and method are presented for administering examinations with adversarial hardening of queries against automated responses. The method include receiving an original query electronically. A response to the original query is to be submitted electronically by a human. The method also includes modifying the original query, thereby generating a modified query. The modified query is configured to be comprehensible by the human, and not properly responded to through electronic means without human support.

Claims (104)

1. A computer system comprising:

one or more processing devices and at least one memory device operably coupled to the one or more processing devices, the one or more processing devices are configured to:

receive an original query electronically, wherein a response to the original query is to be submitted electronically by a human;

modify the original query, thereby generating a modified query, wherein one or more features of the modified query are preserved, and the modified query is comprehensible by the human;

transmit the modified query to one or more artificial intelligence (AI) agents;

execute, via the one or more AI agents, an attempted labeling operation on the modified query; and

determine that the modified query cannot be responded to through electronic means without human support based on the attempted labeling operation failing to assign a label to the modified query and the modified query can be responded to through electronic means without human support based on the attempted labeling operation assigning a label to the modified query.

2. The computer system of claim 1 , further comprising:

one or more filtering components communicatively coupled to the one or more processing devices, wherein the one or more processing devices are further configured to:

transmit the original query to the one or more filtering components, thereby to implement one or more adversarial hardening transformations to the original query.

3. The computer system of claim 2 , further comprising:

one or more semantic services communicatively coupled to the one or more processing devices, wherein the one or more processing devices are further configured to:

transmit the modified query to the one or more semantic services;

transmit the original query to the one or more semantic services; and

execute, through the one or more semantic services, a similarity assessment between the original query and the modified query.

4. The computer system of claim 3 , wherein the one or more processing devices are further configured to:

determine, through the one or more semantic services, the modified query is comprehensible by the human.

5. The computer system of claim 1 , wherein the one or more processing devices are further configured to one or more of:

assign, through the one or more AI agents, a label to the modified query;

assign, through the one or more AI agents, a confidence value to the modified query; and

generate, through the one or more AI agents, a response to the modified query.

6. The computer system of claim 1 , wherein the one or more processing devices are further configured to one or more of:

fail to assign, through the one or more AI agents, a label to the modified query;

generate, through the one or more AI agents, no response to the modified query; and

generate, through the one or more AI agents, an incorrect response to the modified query.

7. The computer system of claim 1 , wherein:

the original query comprises a modality of one or more of:

an original textual query;

an original pictorial query; and

an original audio query; and

the one or more processing devices are further configured to modify the original query including modification of the modality of the original query including conversion of the original textual query to one or more of:

an at least partially modified audio query including at least some adversarial noise; and

an at least partially modified image query.

8. The computer system of claim 1 , further comprising:

one or more filtering components communicatively coupled to the one or more processing devices;

one or more semantic services communicatively coupled to the one or more filtering components;

access to the one or more AI agents communicatively coupled to the one or more filtering components, wherein the one or more processing devices are further configured to:

transform, through the one or more filtering components, the original query into an at least partially modified query;

transmit, iteratively, the original query and the at least partially modified query to the one or more semantic services;

transmit, iteratively, the at least partially modified query to the one or more AI agents;

transmit, iteratively, the at least partially modified query to the one or more filtering components;

determine, iteratively:

comprehensibility, through the one or more semantic services, of the at least partially modified query by the human; and

the at least partially modified query cannot be responded to through the electronic means without the human support, through the one or more AI agents, thereby to establish the at least partially modified query is a fully modified query; and

transmit the fully modified query to the human.

9. A computer program product, the computer program product comprising:

one or more computer readable storage media; and

program instructions stored on the one or more computer readable storage media, the program instructions comprising:

program instructions to receive an original query electronically, wherein a response to the original query is to be submitted electronically by a human;

program instructions to modify the original query, thereby generating a modified query, wherein one or more features of the modified query are preserved, and the modified query is comprehensible by the human;

program instructions to transmit the modified query to one or more artificial intelligence (AI) agents;

program instructions to execute, via the one or more AI agents, an attempted labeling operation on the modified query; and

program instructions to determine that the modified query cannot be responded to through electronic means without human support based on the attempted labeling operation failing to assign a label to the modified query and the modified query can be responded to through electronic means without human support based on the attempted labeling operation assigning a label to the modified query.

10. The computer program product of claim 9 , further comprising:

program instructions to transform, through one or more filtering components, the original query into an at least partially modified query, thereby implementing one or more adversarial hardening transformations to the original query;

program instructions to transmit, iteratively, the original query and the at least partially modified query to one or more semantic services;

program instructions to transmit, iteratively, the at least partially modified query to the one or more AI agents;

program instructions to transmit, iteratively, the at least partially modified query to the one or more filtering components;

program instructions to determine, iteratively:

comprehensibility, through the one or more semantic services, of the at least partially modified query by the human; and

the at least partially modified query cannot be responded to through the electronic means without the human support, through the one or more AI agents, thereby to establish the at least partially modified query is a fully modified query; and

program instructions to transmit the fully modified query to the human.

11. A computer-implemented method comprising:

receiving an original query electronically, wherein a response to the original query is to be submitted electronically by a human;

modifying the original query, thereby generating a modified query, wherein one or more features of the modified query are preserved, and the modified query is comprehensible by the human;

transmitting the modified query to one or more artificial intelligence (AI) agents;

executing, via the one or more AI agents, an attempted labeling operation on the modified query; and

determining that the modified query cannot be responded to through electronic means without human support based on the attempted labeling operation failing to assign a label to the modified query and the modified query can be responded to through electronic means without human support based on the attempted labeling operation assigning a label to the modified query.

12. The method of claim 11 , wherein the generating a modified query

comprises:

transmitting the original query to one or more filtering components, thereby implementing one or more adversarial hardening transformations to the original query.

13. The method of claim 12 , further comprising:

transmitting the modified query to one or more semantic services;

transmitting the original query to the one or more semantic services; and

executing, through the one or more semantic services, a similarity assessment between the original query and the modified query.

14. The method of claim 13 , wherein the executing the similarity assessment comprises:

determining, through the one or more semantic services, the modified query is comprehensible by the human.

15. The method of claim 11 , wherein executing an attempted labeling operation

on the modified query comprises one or more of:

assigning a label to the modified query;

assigning a confidence value to the modified query; and

generating a response to the modified query.

16. The method of claim 11 , wherein executing an attempted labeling

operation on the modified query comprises one or more of:

failing to assign a label to the modified query;

generating no response to the modified query; and

generating an incorrect response to the modified query.

17. The method of claim 11 , wherein:

the receiving the original query electronically comprises receiving the original query with a modality of one or more of:

an original textual query;

an original pictorial query; and

an original audio query; and

the modifying the original query comprises modifying the modality of the original query comprises converting the original textual query to one or more of:

an at least partially modified audio query including at least some adversarial noise; and

an at least partially modified image query.

18. The method of claim 11 , further comprising:

transforming, through the one or more filtering components, the original query into an at least partially modified query;

transmitting, iteratively, the original query and the at least partially modified query to the one or more semantic services;

transmitting, iteratively, the at least partially modified query to the one or more AI agents;

transmitting, iteratively, the at least partially modified query to the one or more filtering components;

determining, iteratively:

comprehensibility, through the one or more semantic services, of the at least partially modified query by the human; and

the at least partially modified query cannot be properly responded to through the electronic means without the human support, thereby establishing the at least partially modified query is a fully modified query; and

transmitting the fully modified query to the human.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Dec 11, 2020
From: RAWAT, AMBRISH; EPPERLEIN, JONATHAN PETER
To: INTERNATIONAL BUSINESS MACHINES CORPORATION
Reel/Frame 054612/0228 →
Continuity (1)
Related Publication 20220188360A1 · Jun 16, 2022
References Cited (46)
US 8204929B2 · Roginsky · 2012 [cited by applicant]
US 9087047B2 · Nagase et al. · 2015 [cited by applicant]
US 9154748B2 · Hsu · 2015 [cited by applicant]
US 9564139B2 · Radhakrishnan · 2017 [cited by applicant]
US 10223547B2 · Rane · 2019 [cited by applicant]
US 10403284B2 · Olabiyi · 2019 [cited by applicant]
US 10642846B2 · Gao · 2020 [cited by applicant]
US 10699161B2 · Malur Srinivasan · 2020 [cited by applicant]
US 10713294B2 · Kim · 2020 [cited by applicant]
US 10719742B2 · Shechtman · 2020 [cited by applicant]
US 20040267730A1 · Dumais · 2004 [cited by applicant]
US 20080145832A1 · Lee · 2008 [cited by applicant]
US 20100332993A1 · Bousseton · 2010 [cited by examiner]
US 20110223576A1 · Foster · 2011 [cited by applicant]
US 20140282887A1 · Kaminsky · 2014 [cited by examiner]
US 20160110422A1 · Roytman · 2016 [cited by examiner]
US 20170262502A1 · Rastunkov · 2017 [cited by applicant]
US 20180174020A1 · Wu · 2018 [cited by applicant]
US 20190147320A1 · Mattyus · 2019 [cited by applicant]
US 20190171936A1 · Karras · 2019 [cited by applicant]
US 20190362191A1 · Lin · 2019 [cited by applicant]
US 20200019642A1 · Dua · 2020 [cited by applicant]
US 20200034357A1 · Panuganty · 2020 [cited by applicant]
US 20200169785A1 · Goodsitt · 2020 [cited by applicant]
US 20200226475A1 · Ma · 2020 [cited by applicant]
CN 110909021A · 2020 [cited by applicant]
JP 2013196374A · 2013 [cited by applicant]
JP 2014078079A · 2014 [cited by applicant]
PCT/CN2021/131817 International Search Report and Written Opinion, mailed Feb. 15, 2022. [cited by applicant]
“$350 Billion Online Education Market: Global Forecast to 2025 by End User, Learning Mode (Self-Paced, Instructor Led), Technology, Country, Company—ResearchAndMarkets.com,” Business Wire, Dec. 18, 2019, 3 pages. <https… [cited by applicant]
Adams, “Online Education Provider Coursera Is Now Worth More Than $1 Billion,” Forbes, Apr. 25, 2019, 5 pages. <https://www.forbes.com/sites/susanadams/2019/04/25/online-education-provider-coursera-is-now-worth-more-tha… [cited by applicant]
Bernard et al., “Exploiting Adversarial Embeddings for Better Steganography,” Proceedings of the ACM Workshop on Information Hiding and Multimedia Security (IH&MMSec'19), Jul. 3-5, 2019, 7 pages. < https://hal.archives-… [cited by applicant]
Carlini et al., “Hidden Voice Commands,” 25th Annual Usenix Security Symposium, Aug. 10-12, 2016, 18 pages. <https://nicholas.carlini.com/papers/2016_usenix_hiddenvoicecommands.pdf>. [cited by applicant]
Kim et al., “Multi-Turn Chatbot Based on Query-Context Attentions and Dual Wasserstein Generative Adversarial Networks,” Applied Sciences, 2019, 9, 3908, Sep. 18, 2019, 8 pages. [cited by applicant]
Lerner, “Adversarially Improving Adversarial Performance of QA Models,” Standford University, Department of Computer Science, 2019, 6 pages. <https://web.stanford.edu/class/archive/cs/cs224n/cs224n.1194/posters/15815037… [cited by applicant]
Liu et al. “Who's Afraid of Adversarial Queries? The Impact of Image Modifications on Content-Based Image Retrieval,” arXiv:1901.10332v3, May 2, 2019, 9 pages. [cited by applicant]
Mell et al., “The NIST Definition of Cloud Computing,” Recommendations of the National Institute of Standards and Technology, U.S. Department of Commerce, Special Publication 800-145, Sep. 2011, 7 pages. [cited by applicant]
Wallace et al., “Trick Me If You Can: Human-in-the-Loop Generation of Adversarial Examples for Question Answering,” Transactions of the Association for Computational Linguistics, vol. 7, Jul. 2019, pp. 387-401. [cited by applicant]
Wu et al., “Audio Steganography Based on Iterative Adversarial Attacks Against Convolutional Neural Networks,” IEEE Transactions on Information Forensics and Security, vol. 15, Jan. 3, 2020, pp. 2282-2294. <https://ieee… [cited by applicant]
Yanagi et al., “Query is GAN: Scene Retrieval With Attentional Text-to-Image Generative Adversarial Network,” IEEE Access, vol. 7, Oct. 14, 2019, pp. 153183-153193. [cited by applicant]
GB2309329.7 Examination Report dated Aug. 25, 2023, 4 pgs. [cited by applicant]
GB2309329.7 Examination Report Under Section 18(3), mailed Feb. 2, 2024, 3 pgs. [cited by applicant]
GB2309329.7 Reply to Examination Report, mailed Feb. 20, 2024, 11 pgs. [cited by applicant]
GB2309329.7 Examination Report Under Section 18(3), mailed Oct. 31, 2023, 4 pgs. [cited by applicant]
GB2309329.7 Reply to Examination Report, mailed Dec. 11, 2023, 8 pgs. [cited by applicant]
Japan Patent Office, “Notice of Reasons for Refusal,” Nov. 26, 2024, 4 Pages, JP Application No. 2023-534095. [cited by applicant]