Abstract:With the widespread adoption of edge computing technologies and the increasing prevalence of deep learning models in these environments, the security risks and privacy threats to models and data have grown more acute. Attackers can exploit various techniques to illegally obtain models or misuse data, leading to serious issues such as intellectual property infringement and privacy breaches. Existing model access control technologies primarily rely on traditional encryption and authentication methods; however, these approaches exhibit significant limitations in terms of flexibility and adaptability in dynamic environments. Although there have been advancements in model watermarking techniques for marking model ownership, they remain limited in their ability to proactively protect intellectual property and prevent unauthorized access. To address these challenges, we propose a novel model access control method tailored for edge computing environments. This method leverages image style as a licensing mechanism, embedding style recognition into the model's operational framework to enable intrinsic access control. Consequently, models deployed on edge platforms are designed to correctly infer only on license data with specific style, rendering them ineffective on any other data. By restricting the input data to the edge model, this approach not only prevents attackers from gaining unauthorized access to the model but also enhances the privacy of data on terminal devices. We conducted extensive experiments on benchmark datasets, including MNIST, CIFAR-10, and FACESCRUB, and the results demonstrate that our method effectively prevents unauthorized access to the model while maintaining accuracy. Additionally, the model shows strong resistance against attacks such as forged licenses and fine-tuning. These results underscore the method's usability, security, and robustness.

SecureEI: Proactive Intellectual Property Protection of AI Models for Edge Intelligence

EI-MTD: Moving Target Defense for Edge Intelligence Against Adversarial Attacks

A Novel Access Control and Privacy-Enhancing Approach for Models in Edge Computing

EdgePro: Edge Deep Learning Model Protection Via Neuron Authorization

Edge Deep Learning Model Protection via Neuron Authorization

SecureNet: Proactive intellectual property protection and model security defense for DNNs based on backdoor learning

Proactive Privacy and Intellectual Property Protection of Multimedia Retrieval Models in Edge Intelligence

A Secure and Privacy-Preserving Machine Learning Model Sharing Scheme for Edge-Enabled IoT

Penetralium: Privacy-preserving and memory-efficient neural network inference at the edge

Protecting Intellectual Property with Reliable Availability of Learning Models in AI-Based Cybersecurity Services

Model Protection: Real-Time Privacy-Preserving Inference Service for Model Privacy at the Edge

Intellectual Property Protection for Deep Learning Models: Taxonomy, Methods, Attacks, and Evaluations

EncryIP: A Practical Encryption-Based Framework for Model Intellectual Property Protection

IDEA: An Inverse Domain Expert Adaptation Based Active DNN IP Protection Method

An Edge-oriented Deep Learning Model Security Assessment Framework

Privacy-preserving Model Training Architecture for Intelligent Edge Computing

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models

Deep Intellectual Property: A Survey

A Privacy-Preserving Deep Learning Scheme for Edge-enhanced Smart Homes

Device-Bind Key-Storageless Hardware AI Model IP Protection: A PUF and Permute-Diffusion Encryption-Enabled Approach

A Trusted Cloud-Edge Decision Architecture Based on Blockchain and MLP for AIoT