Registration prompt copyright verification method and device based on multi-model joint gradient optimization

By generating adversarial hints through multi-model joint gradient optimization, the robustness of copyright verification for large language models is insufficient, achieving stable copyright verification across models, avoiding performance degradation, and applicable to copyright protection of multiple homologous models.

CN122333429APending Publication Date: 2026-07-03HANGZHOU JUNTONG FUTURE TECHNOLOGY CO LTD
0 Cites 1 Cited by

Patent Information

Application Number
CN202510474773.1
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2025-04-16
Publication Date
2026-07-03

AI Technical Summary

Technical Problem

Existing copyright verification techniques for large language models lack robustness, especially single-model fingerprint watermark generation, which is weak in adversarial capabilities and has poor transferability, making it difficult to effectively cover diverse variations of the same series of models. Furthermore, traditional methods may impair model performance or be easily tampered with.

Method used

We employ a multi-model joint gradient optimization approach, which constructs a multi-model ensemble through adversarial suffix generation and optimization. This generates consistent and effective adversarial hints across multiple homologous models, avoiding reliance on model fine-tuning and enhancing the cross-model adaptability and robustness of fingerprints.

Benefits of technology

It significantly improves the robustness and stability of copyright verification, effectively identifies copyrights for various model series, avoids performance degradation, is suitable for protecting open-source models from leakage and unauthorized distribution, and has broad practical application value.

✦ Generated by Eureka AI based on patent content.
Patent Text Reader

Abstract

The invention discloses an antagonism prompt copyright verification method and equipment based on multi-model joint gradient optimization, and aims to solve the problems of weak antagonism, poor migration capability and insufficient concealment of single-model fingerprint generation. A multi-model joint gradient optimization adversarial suffix is adopted to generate an adversarial prompt with a cross-model recognition capability as a model fingerprint feature, and copyright verification is realized by detecting a specific response mode of a to-be-detected model for the adversarial prompt; according to the method, the most essential features of the homologous model are captured by depending on multiple downstream models, the confrontation prompt optimized by the features has higher specificity and effectiveness, and intellectual property risks such as model leakage and unauthorized distribution can be effectively coped with.
Need to check novelty before this filing date? Find Prior Art