剖析AI与端到端加密的冲突,提出安全设计与合规建议
How To Think About End-To-End Encryption and AI: Training, Processing, Disclosure, and Consent
- 分析AI助手嵌入加密应用与加密数据训练模型的双重风险
- 指出现有做法可能破坏端到端加密的隐私保障承诺
- 提供技术设计、用户同意和透明披露的具体实践指南
端到端加密(E2EE)已成为全球数十亿用户通信安全的黄金标准,提供强保密性和隐私保护。然而,当前人工智能(AI)模型的广泛集成,包括在E2EE系统中的应用,引发了严重安全担忧。本文从两个方面批判性审视AI与E2EE的(不)兼容性:一是将AI‘助手’集成到E2EE应用中,二是利用加密数据训练AI模型。我们分析了每种情形的潜在安全影响,识别出对E2EE安全保证的冲突。随后,结合法律视角,探讨了在E2EE中集成AI如何削弱其承诺的机密性。最后,基于技术和法律分析,提出一系列具体建议:必须优先考虑的技术设计选择;服务提供商应准确传达E2EE安全性的要求;以及关于AI功能默认行为和用户同意的最佳实践。本文旨在推动关于快速部署AI与E2EE安全保障之间张力的理性讨论,并指导新AI功能的负责任开发。
原文摘要 · Abstract (English)
End-to-end encryption (E2EE) has become the gold standard for securing communications, bringing strong confidentiality and privacy guarantees to billions of users worldwide. However, the current push towards widespread integration of artificial intelligence (AI) models, including in E2EE systems, raises some serious security concerns. This work performs a critical examination of the (in)compatibility of AI models and E2EE applications. We explore this on two fronts: (1) the integration of AI "assistants" within E2EE applications, and (2) the use of E2EE data for training AI models. We analyze the potential security implications of each, and identify conflicts with the security guarantees of E2EE. Then, we analyze legal implications of integrating AI models in E2EE applications, given how AI integration can undermine the confidentiality that E2EE promises. Finally, we offer a list of detailed recommendations based on our technical and legal analyses, including: technical design choices that must be prioritized to uphold E2EE security; how service providers must accurately represent E2EE security; and best practices for the default behavior of AI features and for requesting user consent. We hope this paper catalyzes an informed conversation on the tensions that arise between the brisk deployment of AI and the security offered by E2EE, and guides the responsible development of new AI features.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。