Black-box dnn watermarking copyright protection method based on scene perception and optical modeling

By generating starburst triggers based on scene perception and optical modeling, the problems of insufficient semantic rationality and trigger stability in black-box watermarking technology are solved, achieving effective copyright protection of deep neural networks and improving the concealment and robustness of watermarks.

CN122415309APending Publication Date: 2026-07-17NANJING UNIV OF INFORMATION SCI & TECH +1
View PDF 0 Cites 0 Cited by

Patent Information

Application Number
CN202610830153.1
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2026-06-10
Publication Date
2026-07-17

AI Technical Summary

Technical Problem

Existing black-box watermarking technology struggles to balance semantic rationality and trigger stability, resulting in insufficient watermark concealment and robustness, making it difficult to effectively protect the intellectual property rights of deep neural networks in practical applications.

Method used

A scene-aware and optical modeling approach is adopted to locate the light source position in the image through a large visual language model, generate a starburst trigger based on Fraunhofer diffraction theory, and construct a starburst watermark image through pixel-level optimization and neighborhood brightness statistics. The model is trained by combining the basic loss and center loss functions to achieve implicit embedding and verification of the watermark.

Benefits of technology

It achieves deep integration of triggers and scene semantics, generates glare phenomena in natural optical imaging, ensures the physical rationality and stability of trigger positions, improves the concealment and robustness of watermarks, and avoids destructive changes to images.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN122415309A_ABST
    Figure CN122415309A_ABST
Patent Text Reader

Abstract

本发明公开了基于场景感知与光学建模的黑盒DNN水印版权保护方法,涉及计算机科学与技术领域。构建标准原始图像数据集,并从中随机选取预设数量的标准原始图像;分别针对每一标准原始图像,利用水印触发器生成模型构建保护水印数据集;根据预设比例混合保护水印数据集和标准原始图像数据集,形成混合训练数据集,并形成以单张标准原始图像及其对应真实类型标签为样本、或以单张保护水印图像及其对应的版权标签为样本的样本集;基于样本集,对目标保护模型进行训练或微调,获得已隐式嵌入保护水印的目标保护模型。本发明生成的星芒触发器能够完全模拟真实光学成像中的自然眩光现象,无需对图像进行破坏性的图案叠加或不可见扰动注入。
Need to check novelty before this filing date? Find Prior Art