字号·· | 护眼
techcrunch

美国运通推出框架,防止AI代理进行未授权购买Amex introduces a framework to prevent AI agents from making unauthorized purchases

点「原文对照」整页切到原文,或双击某段只看那段的原文。

中国香港——2012年8月3日:一张美国运通信用卡的特写。美国运通是一家美国跨国金融服务公司。美国运通以其信用卡最为知名。"Hong Kong, China - August 3, 2012: Close up of an American Express Credit Card. American Express is an American multinational financial services corporation. American Express is best known for its credit card."

个人AI代理正日益代表用户进行交易,但鉴于大型语言模型的非确定性特征,AI机器人容易做出不该做的事情。在这种情况下,这引发了AI失误并进行未授权交易的可能性。

Personal AI agents are increasingly making transactions on their users’ behalf, but given the nondeterministic nature of large language models, AI bots are prone to doing what they’re not supposed to. Which, in this case, raises the possibility of AI misfiring and making unauthorized transactions.

为应对这一问题,美国运通正在推出一个新框架,旨在AI代理完成交易之前捕捉并验证客户的购买意图。

To get ahead of this problem, American Express is introducing a new framework designed to capture and authenticate a customer’s purchase intent before an AI agent completes the transaction.

该公司表示,应该有一种方法确保客户的购买指令在整个交易生命周期中得到执行,从购买行为到随后的所有环节。

The idea is that there should be a way to ensure that the customer’s purchase instructions are carried throughout the transaction lifecycle, Amex says, from the purchase to everything that follows.

该框架被称为“意图智能框架”,公司希望它能成为AI驱动交易的行业标准。

Dubbed the “Intent Intelligence Framework,” the company hopes it will become an industry standard for AI-powered transactions.

在接受TechCrunch采访时,美国运通代理合作伙伴与战略副总裁汉娜·博齐安解释道:“这些新交易将涉及消费者、商家和代理。”她表示,公司希望确保代理交易仍然“无缝、可信且安全”,正如持卡人所期望的那样。该框架的发布紧随美国运通4月推出的代理商业体验(ACE开发者工具包),该工具包包含若干服务,现已加入意图框架。

“These new transactions will have a consumer, a merchant, and an agent,” explained Amex’s VP of Agentic Partnerships and Strategy, Hannah Bozian, in an interview with TechCrunch. She said the company wanted to ensure that agentic transactions are still “seamless, trusted, and secure, the way our card members expect them to be.”This framework’s release follows the company’s April launch of Amex’s Agentic Commerce Experiences, or the ACE Developer Toolkit, which includes a handful of services that now include the intent framework.

美国运通表示,目前尚未因代理商业而看到争议增加的情况,但希望在此类商业规模扩大时主动构建这项技术。部分原因在于,消费者已表明他们愿意尝试代理商业。

Amex said it has not yet seen an increase in disputes because of agentic commerce, but it wanted to be proactive in building this technology as this type of commerce scales. In part, that’s because consumers have signaled they’re open to trying agentic commerce.

在一份最近的美国运通Trendex报告中,公司告诉TechCrunch,66%的受访美国消费者表示他们可能会使用AI代理来研究产品或服务的最佳价格,61%表示他们可能在未来12个月内使用AI代理进行产品或服务推荐。

In a recent Amex Trendex report, 66% of surveyed U.S. consumers said they’re likely to use AI agents to research the best price for a product or service, and 61% said they’re likely to use it for a product or service recommendation over the next 12 months, the company told TechCrunch.

首先,美国运通的新意图框架从“创建意图 API”开始,该 API 将捕获客户的购买指令,以及他们在请求中可能包含的其他限制条件,例如商户名称、最高预算和其他产品偏好。根据所涉及的 AI 模型,收集此意图的方式可能会有所不同,但计划是使该框架足够灵活,以支持所有代理商业模式,Bozian 表示。随后,客户对其身份进行身份验证,并确认代理所捕获的意图。

To start, Amex’s new intent framework begins with a Create Intent API, which will capture the customer’s purchase instructions along with other constraints they may have included in their request, like the merchant’s name, maximum budget, and other product preferences. How this intent is collected may vary depending on the AI model involved, but the plan is to make this framework flexible enough to support all agentic commerce models, Bozian said. The customer then authenticates their identity and signs off on the intent captured by the agent.

然后,系统会生成一个 Intent ID,即代表该意图的唯一标识符,同时生成一个 Proof of Intent Token,该令牌包含客户的高层次限制条件。该令牌用于获取代理在结账时使用的安全数字支付凭证,以替代客户的实际信用卡号。美国运通表示,通过这种方式,购买过程将保持安全,同时符合客户授权代理所执行的操作。

Then an Intent ID, a unique identifier representing the intent, is created, along with a Proof of Intent Token, which includes the customer’s high-level constraints. This token is used to obtain a secure digital payment credential that the agent will use at checkout instead of the customer’s actual credit card number. In doing so, Amex says, the purchase will remain secure while being aligned with what the customer authorized the agent to do.

美国运通还表示,此 Intent ID 和令牌也可用于交易流程的不同环节,帮助企业管理诸如欺诈预防和争议解决等方面。

This Intent ID and token can also be used in different parts of the transaction process, helping companies to manage areas like fraud prevention and dispute resolution, Amex said.

Bozian 表示:“我们的方法与其他人的实现方式不同,因为它在交易流程中更早地引入了意图。这一点很重要,因为它有助于在风险发生之前降低一些风险。”她举例说明,客户可能会要求代理购买一双白色 Nike 运动鞋,尺码为 9,但代理却提交了从 Adidas 购买鞋子的请求。在这种情况下,美国运通可以阻止交易进行,因为代理犯了错误。

“Our approach differs from the implementations of others in that it pulls intent earlier into the transaction flow. And this is important because it helps mitigate some risk before the risk occurs,” said Bozian. She offered the example of a customer asking an agent to buy white Nike sneakers in a size 9, but the agent submits a request to purchase shoes from Adidas. In such a case, Amex could prevent the transaction from going through because the agent made a mistake.

博齐安(Bozian)还指出,虽然如今许多客服代表在为客户购买商品前都会征求客户的同意,但美国运通(Amex)预计未来在某些情况下,客服代表的操作将变得更加自主。例如,消费者可以允许客服代表为他们重新订购日常用品(如纸巾或卫生纸);在这些商品类别中,唯一的限制因素是价格和规格,而非商家或品牌。在这种情况下,利用技术来进行额外的核对是非常合理的,以确保交易符合消费者的真实意图。

Bozian also notes that while many agents today ask for customer consent before making a purchase, Amex foresees a future where agents may act much more autonomously in some cases. For instance, a consumer might allow their agent to re-order household staples, like paper towels or toilet paper — categories in which the only real constraint is the price and size, not merchant or brand. In these scenarios, it makes sense to have technology in the loop performing that extra check, to ensure the transactions match the customer’s intent.

她补充说,记录哪些交易是由哪些客服代表在何时授权的,也有助于防止欺诈行为的发生。

Having a log of what was authorized by which agent and when could also help address fraud on behalf of the agent, she noted.

美国运通已经在与支付生态系统中的合作伙伴进行讨论,以推进“ACE”(Agent Commerce Engine)项目的实施。该项目包括包含美国运通支付信息的代理令牌(agent tokens),以及开发工具包(developer kit)中的其他组件。

Amex is already in discussions with partners across the payments ecosystem for implementing ACE, which includes the agentic tokens that contain Amex’s payment credentials, as well as other parts of the developer kit.

该公司表示,随着代理式商务生态系统的发展,他们计划继续积极推进“ACE”项目的开发。

The company said it plans to actively develop ACE further as the agentic commerce ecosystem evolves.