A Novel Access Control and Privacy-Enhancing Approach for Models in Edge Computing

Peihao Li

2024-11-06

Abstract:With the widespread adoption of edge computing technologies and the increasing prevalence of deep learning models in these environments, the security risks and privacy threats to models and data have grown more acute. Attackers can exploit various techniques to illegally obtain models or misuse data, leading to serious issues such as intellectual property infringement and privacy breaches. Existing model access control technologies primarily rely on traditional encryption and authentication methods; however, these approaches exhibit significant limitations in terms of flexibility and adaptability in dynamic environments. Although there have been advancements in model watermarking techniques for marking model ownership, they remain limited in their ability to proactively protect intellectual property and prevent unauthorized access. To address these challenges, we propose a novel model access control method tailored for edge computing environments. This method leverages image style as a licensing mechanism, embedding style recognition into the model's operational framework to enable intrinsic access control. Consequently, models deployed on edge platforms are designed to correctly infer only on license data with specific style, rendering them ineffective on any other data. By restricting the input data to the edge model, this approach not only prevents attackers from gaining unauthorized access to the model but also enhances the privacy of data on terminal devices. We conducted extensive experiments on benchmark datasets, including MNIST, CIFAR-10, and FACESCRUB, and the results demonstrate that our method effectively prevents unauthorized access to the model while maintaining accuracy. Additionally, the model shows strong resistance against attacks such as forged licenses and fine-tuning. These results underscore the method's usability, security, and robustness.

Cryptography and Security,Artificial Intelligence

What problem does this paper attempt to address?

The paper attempts to address the issue of security and privacy protection for deep learning models and data in edge computing environments. Specifically:

1. **Security risks for models and data**: With the widespread application of edge computing technology and the proliferation of deep learning models in these environments, the security risks and privacy threats faced by models and data are becoming increasingly severe. Attackers can use various techniques to illegally obtain models or misuse data, leading to serious issues such as intellectual property infringement and privacy leakage.

2. **Limitations of existing access control technologies**: Existing model access control technologies mainly rely on traditional encryption and authentication methods, such as Public Key Infrastructure (PKI) authentication and symmetric encryption transmission protection. However, these methods exhibit significant lack of flexibility and adaptability in dynamic and heterogeneous edge computing environments.

3. **Limitations of passive protection technologies**: Although model watermarking technology has made progress in marking model ownership, its ability to actively protect intellectual property and prevent unauthorized access is limited.

To address these challenges, the paper proposes a novel model access control method based on image style, embedding style recognition into the operational framework of the model to achieve intrinsic access control. This method not only prevents attackers from unauthorized access to the model but also enhances data privacy on terminal devices.