Using watermark information and weight information to train an embedded neural network model
US11941721B2 · kind B2 · utility
Assignee
Inventors
Key dates
| Filing date | Apr 15, 2022 |
| Grant date | Mar 26, 2024 |
| Priority date | — |
| Expiry date | Aug 6, 2042 |
Classification
- Technology area (CPC G)Physics
- CPC primaryG06T2207/20221
- WIPO fieldComputer technology
- WIPO sectorElectrical engineering
Abstract
A method and an apparatus for embedding watermark information are disclosed in the present disclosure. The method trains an embedded neural network model using weight information of a target neural network model and target watermark information that is to be embedded into the target neural network model, updates the weight information of the target neural network model according to target watermark embedded data provided by the embedded neural network model, and obtains a target neural network model embedded with the target watermark information. Since the embedded neural network model includes multiple neural network layers, this method increases the complexity of the watermark embedding process, and is able to avoid the problem that watermark information of existing neural network models has poor robustness to watermarking attacks such as overwriting attacks and model compression.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.