System and method for securing audio and video data for artificial intelligence operations on an information handling system
An information handling system comprising a hardware processor to execute computer-readable program code instructions of a first unprivileged artificial intelligence (AI) productivity-tool software process for operations of an AI productivity tool software module to detect receipt of audio/video user query input data and generate a first encryption key for transmission to an audio/video encryption driver and a second unprivileged AI productivity-tool software process. The hardware processor to execute computer-readable program code of the audio/video encryption filter driver to encrypt the audio/video user query input data with the first encryption key for storage in an allocated encrypted storage buffer portion of the kernel system memory and the for second unprivileged AI productivity-tool software process to access the audio/video user query input data from the allocated encrypted storage buffer portion of the kernel system memory with the first encryption key to determine a capability intent action responsive to a user query input.
1 . An information handling system comprising:
a hardware processor, a memory device including kernel system memory, and a power management unit to provide power to the hardware processor and memory device;
the hardware processor to execute computer-readable program code instructions of a first unprivileged artificial intelligence (AI) productivity-tool software process for operations of an AI productivity tool software module to detect receipt of audio/video user query input data at an audio/video (A/V) input stack buffer memory that was recorded from a peripheral device;
the hardware processor to execute computer-readable program code of an encryption key generator associated with the first unprivileged AI productivity-tool software process to generate a first encryption key and transmit the first encryption key to an audio/video (A/V) encryption driver and securely transmit the first encryption key to a second unprivileged AI productivity-tool software process for operations of the AI productivity tool software module to identify a capability intent action responsive to the received audio/video user query input data;
the hardware processor to execute computer-readable program code of the A/V encryption filter driver to retrieve the audio/video user query input data from the A/V input stack buffer memory and use the first encryption key encrypt the audio/video user query input data for storage in an allocated encrypted storage buffer portion of the kernel system memory; and
the hardware processor to execute the computer-readable program code of the A/V encryption filter driver to send a handle describing the allocated kernel system memory to the second unprivileged AI productivity-tool software process for the second unprivileged AI productivity-tool software process to access the audio/video user query input data from the allocated encrypted storage buffer portion of the kernel system memory with the first encryption key.
2 . The information handling system of claim 1 , wherein the allocated encrypted storage buffer portion of the kernel system memory stores the audio/video user-query input data and prevents access from unauthorized software processes not authorized by the operations of the AI productivity tool software module and not providing the first encryption key to the audio/video encryption filter driver.
3 . The information handling system of claim 1 further comprising:
the hardware processor to execute computer-readable program code instructions of the first unprivileged AI productivity-tool software process to define cleanup information including a memory-erasure policy describing how the allocated encrypted storage buffer portion of the kernel system memory is to erase the recorded audio/video user query input data.
4 . The information handling system of claim 1 further comprising:
the hardware processor to execute computer-readable program code of the first unprivileged AI productivity-tool software process to communicate with the second unprivileged AI productivity-tool software process to transmit the first encryption key via a mutual transport layer security protocol to grant authorized access to the audio/video user query input data for the second unprivileged AI productivity-tool software process of the operations of the AI productivity tool software module.
5 . The information handling system of claim 1 further comprising:
the hardware processor to execute computer-readable program code instructions of an intent identification software application that is the second unprivileged AI productivity-tool software process to receive a copy of the first encryption key from the first unprivileged AI productivity-tool software process to gain authorized access to the recorded audio/video user query input data in the allocated encrypted storage buffer portion of the kernel system memory for processing to determine a user query intent value from the recorded audio/video user query input data for a similarity comparison to a capability intent value.
6 . The information handling system of claim 1 further comprising:
the hardware processor to execute computer-readable program code of the first unprivileged AI productivity-tool software process to instruct a third unprivileged AI productivity-tool software process to provide a second encryption key to the second unprivileged AI productivity-tool software process to encrypt output of the second unprivileged AI productivity-tool software process for access only by the third unprivileged AI productivity-tool software process during the operations of the AI productivity tool software module to identify the capability intent action of the information handling system responsive to the received user query input audio/video data.
7 . The information handling system of claim 6 , wherein the encrypted output of the second unprivileged AI productivity-tool software process is stored on a second allocated encrypted storage buffer portion of the kernel system memory distinct from the allocated encrypted storage buffer portion of the kernel system memory used to store the received audio/video user query input data by the A/V encryption filter driver.
8 . The information handling system of claim 6 further comprising:
the hardware processor to execute computer-readable program code instructions of the second unprivileged AI productivity-tool software process to transmit an output memory location handle to the third unprivileged AI productivity-tool for the third unprivileged AI productivity-tool software process to access the encrypted output of the second unprivileged AI productivity-tool software process using the second encryption key.
9 . A method of securing audio-video user query input data on an information handling system executing an AI productivity tool software module for chatbot operations comprising:
executing, with a hardware processor, computer-readable program code of a first unprivileged AI productivity-tool software process of operations of an AI productivity tool software module to request audio/video user query input data be recorded from a microphone or a video camera;
receiving the audio/video user query input data at an audio/video (A/V) input stack buffer memory;
executing computer-readable program code of an encryption key generator with the hardware processor that is associated with the first unprivileged AI productivity-tool software process to generate a first encryption key and transmit the first encryption key to an A/V encryption driver and securely transmit the first encryption key to a second unprivileged AI productivity-tool software process for operations of the AI productivity tool software module to identify a capability intent action responsive to the received audio/video user query input data;
executing computer-readable program code of the A/V encryption filter driver to retrieve the audio/video user query input data from the A/V input stack buffer memory and use the first encryption key encrypt the audio/video user query input data for storage in an allocated encrypted storage buffer portion of the kernel system memory; and
executing the computer-readable program code of the A/V encryption filter driver to send a handle describing the allocated kernel system memory to the second unprivileged AI productivity-tool software process for the second unprivileged AI productivity-tool software process to access the audio/video user query input data from the allocated encrypted storage buffer portion of the kernel system memory with the first encryption key.
10 . The method of claim 9 , wherein the allocated encrypted storage buffer portion of the kernel system memory stores the audio/video user-query input data and prevents access from unauthorized software processes not authorized by the operations of the AI productivity tool software module and not providing the first encryption key to the audio/video encryption filter driver.
11 . The method of claim 9 further comprising:
execute computer-readable program code of the first unprivileged AI productivity-tool software process to communicate with the second unprivileged AI productivity-tool software process to transmit the first encryption key via a mutual transport layer security protocol to grant authorized access to the audio/video user query input data in the allocated encrypted storage buffer portion of the kernel system memory to the second unprivileged AI productivity-tool software process for the operations of the AI productivity tool software module.
12 . The information handling system of claim 1 further comprising:
executing computer-readable program code instructions of an intent identification software application that is the second unprivileged AI productivity-tool software process to receive a copy of the first encryption key from the first unprivileged AI productivity-tool software process to gain authorized access to the recorded audio/video user query input data in the allocated encrypted storage buffer portion of the kernel system memory for processing to determine a user query intent value from the recorded audio/video user query input data for a similarity comparison to a capability intent value.
13 . The information handling system of claim 1 further comprising:
executing computer-readable program code of the first unprivileged AI productivity-tool software process to instruct a third unprivileged AI productivity-tool software process to provide a second encryption key to the second unprivileged AI productivity-tool software process to encrypt output of the second unprivileged AI productivity-tool software process for access only by the third unprivileged AI productivity-tool software process during the operations of the AI productivity tool software module to identify the capability intent action of the information handling system responsive to the received user query input audio/video data.
14 . An information handling system comprising:
a hardware processor, a memory device including kernel system memory, and a power management unit to provide power to the hardware processor and memory device;
the hardware processor to execute computer-readable program code instructions of a first unprivileged artificial intelligence (AI) productivity-tool software process for operations of an AI productivity tool software module to detect receipt of audio/video user query input data at an audio/video (A/V) input stack buffer memory that was recorded from a microphone or a video camera;
the hardware processor to execute computer-readable program code of an encryption key generator associated with the first unprivileged AI productivity-tool software process to generate a first encryption key and transmit the first encryption key to an audio/video (A/V) encryption driver and to a second unprivileged AI productivity-tool software process for operations of the AI productivity tool software module;
the hardware processor to execute computer-readable program code of the A/V encryption filter driver to retrieve the audio/video user query input data from the A/V input stack buffer memory and use the first encryption key encrypt the audio/video user query input data for storage in an allocated encrypted storage buffer portion of the kernel system memory; and
the hardware processor to execute computer readable code instructions of the second unprivileged AI productivity-tool software process to retrieve and decrypt the audio/video user query input data using the first encryption key, process the audio/video user query input data in a second operation step of the AI productivity tool software module operations as second software process output, and encrypt the second software process output with a second encryption key received from a third unprivileged AI productivity-tool software process of the operations of the AI productivity tool software module operations to identify a capability intent action on the information handling system responsive to the received audio/video user query input data.
15 . The information handling system of claim 14 , wherein the allocated encrypted storage buffer portion of the kernel system memory stores the audio/video user-query input data and prevents access from unauthorized software processes not authorized by the operations of the AI productivity tool software module and not providing the first encryption key to the audio/video encryption filter driver.
16 . The information handling system of claim 14 , wherein the encrypted second software process output of the second unprivileged AI productivity-tool software process is stored on a second allocated encrypted storage buffer portion of the kernel system memory distinct from the allocated encrypted storage buffer portion of the kernel system memory used to store the received audio/video user query input data by the A/V encryption filter driver.
17 . The information handling system of claim 14 further comprising:
the hardware processor to execute computer-readable program code of the first unprivileged AI productivity-tool software process to communicate with the second unprivileged AI productivity-tool software process to transmit the first encryption key via a mutual transport layer security protocol to grant authorized access to the audio/video user query input data for the second unprivileged AI productivity-tool software process of the operations of the AI productivity tool software module.
18 . The information handling system of claim 14 further comprising:
the hardware processor to execute the computer-readable program code of the A/V encryption filter driver to send a handle describing the allocated kernel system memory to the second unprivileged AI productivity-tool software process for the second unprivileged AI productivity-tool software process to access to the audio/video user query input data from the allocated encrypted storage buffer portion of the kernel system memory.
19 . The information handling system of claim 14 further comprising:
the hardware processor to execute computer-readable program code of the first unprivileged AI productivity-tool software process to instruct the third unprivileged AI productivity-tool software process to provide a second encryption key to the second unprivileged AI productivity-tool software process to encrypt the second software process output of the second unprivileged AI productivity-tool software process for access only by the third unprivileged AI productivity-tool software process during the operations of the AI productivity tool software module to identify the capability intent action responsive to the received audio/video user query input data.
20 . The information handling system of claim 14 further comprising:
the hardware processor to execute computer-readable program code instructions of the second unprivileged AI productivity-tool software process to execute an embedding machine learning algorithm to generate a user query input intent value for the received audio/video user query input data as the second software process output.