CVAIOct 14, 2023

Unified High-binding Watermark for Unconditional Image Generation Models

arXiv:2310.09479v12 citationsh-index: 18
Originality Incremental advance
AI Analysis

This addresses the urgent need for data traceability and copyright certification in AI-generated content, offering a practical solution for model owners, though it is incremental as it builds on existing watermarking techniques.

The authors tackled the problem of protecting intellectual property in unconditional image generation models by proposing a two-stage unified watermark verification mechanism that achieves almost zero false positive rate and enables cross-model data theft verification.

Deep learning techniques have implemented many unconditional image generation (UIG) models, such as GAN, Diffusion model, etc. The extremely realistic images (also known as AI-Generated Content, AIGC for short) produced by these models bring urgent needs for intellectual property protection such as data traceability and copyright certification. An attacker can steal the output images of the target model and use them as part of the training data to train a private surrogate UIG model. The implementation mechanisms of UIG models are diverse and complex, and there is no unified and effective protection and verification method at present. To address these issues, we propose a two-stage unified watermark verification mechanism with high-binding effects for such models. In the first stage, we use an encoder to invisibly write the watermark image into the output images of the original AIGC tool, and reversely extract the watermark image through the corresponding decoder. In the second stage, we design the decoder fine-tuning process, and the fine-tuned decoder can make correct judgments on whether the suspicious model steals the original AIGC tool data. Experiments demonstrate our method can complete the verification work with almost zero false positive rate under the condition of only using the model output images. Moreover, the proposed method can achieve data steal verification across different types of UIG models, which further increases the practicality of the method.

Foundations

The foundational work for this paper's niche, ranked by how specifically the neighbourhood builds on it — not by global fame.

Your Notes