Methods and systems for security enhancement in artificial intelligence model interactions via automated injection and proxy server implementation
The present technology relates to a computer-implemented method for enhancing enterprise-wide security when using Artificial intelligence (AI) models. Embodiments involve a JavaScript injection process facilitated by a proxy server. This process does not require manual installation as it is automatically injected during operation. The JavaScript injection process operates by intercepting unsecured AI input and output data provided by users interacting with AI websites. The input and output data are sent to a security Application Programming Interface (API) which applies an enterprise security policy to the data in real-time, thereby transforming unsecured input and output into secure data. Embodiments provide a robust framework for safe interaction with Artificial intelligence models while mitigating the risks associated with the transmission of sensitive information over the internet.
1 . A computer-implemented method for securely using Artificial Intelligence (AI) models, the computer-implemented method comprising:
automatically injecting a security program, using a proxy server, the automatically injecting the security program embedding code into HTML content of a website enabling security for using Artificial Intelligence (AI) models and the security program being automatically injected and not requiring manual installation, the security program comprising:
intercepting unsecure AI input data from a user inputting data into an input field of the website;
sending the unsecure AI input data to a security Application Programming Interface (API), the security Application Programming Interface (API) enabling enforcing of an AI model input enterprise policy, the enforcing of the AI model input enterprise policy transforming the unsecure AI input data to secure AI input data by modifying the unsecure AI input data in real time;
intercepting unsecure AI output data in response to the secure AI input data being sent to a server of the website; and
sending the unsecure AI output data to the security Application Programming Interface (API), the security Application Programming Interface (API) enabling enforcing of an AI model output enterprise policy, the enforcing of the AI model output enterprise policy transforming the unsecure AI output data to secure AI output data by modifying the unsecure AI output data in real time.
2 . The computer-implemented method of claim 1 , wherein the modifying the unsecure AI input data in real time uses a hook procedure, the hook procedure intercepting an API call and altering the unsecure AI input data.
3 . The computer-implemented method of claim 1 , wherein the modifying the unsecure AI output data in real time uses a hook procedure, the hook procedure intercepting an API call and altering the unsecure AI output data.
4 . The computer-implemented method of claim 1 ,
wherein the modifying the unsecure AI input data in real time uses a hidden overlay, the hidden overlay being above a content layer of the website; and
further comprising displaying the secure AI input data to the user using the input field of the website and the hidden overlay.
5 . The computer-implemented method of claim 4 , wherein the modifying the unsecure AI input data in real time comprises redacting personal identifiable information (PII) according to the AI model input enterprise policy.
6 . The computer-implemented method of claim 1 ,
wherein the modifying the unsecure AI output data in real time uses a hidden underlay, the hidden underlay being below a content layer of the website; and
further comprising displaying the secure AI output data to the user using an output field of the website and the hidden underlay.
7 . The computer-implemented method of claim 6 , wherein the modifying the unsecure AI output data in real time comprises redacting AI output data according to the AI model output enterprise policy.
8 . The computer-implemented method of claim 1 , wherein the security program is a JavaScript injection process, the JavaScript injection process being live, in real time.
9 . The computer-implemented method of claim 1 , further comprising dynamically discovering a configuration for each website including:
comparing a website configuration to a prime library database; and
selecting the website configuration based on the comparing.
10 . The computer-implemented method of claim 1 , wherein the proxy server is configured to intercept and modify network traffic between the user and the server of the website.
11 . The computer-implemented method of claim 1 , wherein the security Application Programming Interface (API) is configured to audit the unsecure AI input data and the unsecure AI output data for compliance with enterprise security policies.
12 . The computer-implemented method of claim 1 , wherein the security program is configured to be updated automatically without user intervention.
13 . The computer-implemented method of claim 1 , wherein the proxy server is configured to log all interactions between the user and the server of the website for security auditing purposes.
14 . The computer-implemented method of claim 1 , wherein the security Application Programming Interface (API) is configured to detect and block malicious activities in real time.
15 . The computer-implemented method of claim 1 , wherein the security program is configured to provide real-time alerts to the user regarding potential security threats.
16 . The computer-implemented method of claim 1 , wherein the security Application Programming Interface (API) is configured to generate reports on a security status of AI input data and AI output data.
17 . The computer-implemented method of claim 1 , wherein the proxy server is configured to provide load balancing for handling multiple user requests simultaneously.
18 . The computer-implemented method of claim 1 , wherein the security Application Programming Interface (API) is configured to perform real-time data analysis for detecting anomalies in AI input data and AI output data.
19 . The computer-implemented method of claim 1 , wherein the security Application Programming Interface (API) is configured to provide real-time feedback to the user regarding a security status of AI input data and AI output data.
20 . The computer-implemented method of claim 1 , wherein the website is an Artificial Intelligence (AI) website.
21 . The computer-implemented method of claim 1 , wherein the modifying the unsecure AI input data in real time uses a hook procedure, the hook procedure intercepting an API call and altering the unsecure AI input data.
22 . The computer-implemented method of claim 1 , wherein the modifying the unsecure AI output data in real time uses a hook procedure, the hook procedure intercepting an API call and altering the unsecure AI output data.
23 . A computer-implemented method for securely using Artificial Intelligence (AI) models, the computer-implemented method comprising:
automatically injecting a JavaScript injection process, using a proxy server, the JavaScript injection process enabling enterprise-wide security for using Artificial Intelligence (AI) models and the JavaScript injection process being automatically injected and not requiring manual installation, the JavaScript injection process comprising:
intercepting unsecure AI input data, using the proxy server, from a user inputting data into an input field of an Artificial Intelligence (AI) website;
sending the unsecure AI input data to a security Application Programming Interface (API), the security Application Programming Interface (API) enabling enforcing of an AI input enterprise policy, the enforcing of the AI input enterprise policy transforming the unsecure AI input data to secure AI input data by modifying the unsecure AI input data in real time;
intercepting unsecure AI output data, using the proxy server, in response to the secure AI input data being sent to a server of the Artificial Intelligence (AI) website; and
sending the unsecure AI output data to the security Application Programming Interface (API), the security Application Programming Interface (API) enabling enforcing of an AI output enterprise policy, the enforcing of the AI output enterprise policy transforming the unsecure AI output data to secure AI output data by modifying the unsecure AI output data in real time.