Deep 3D-to-2D Watermarking: Embedding Messages in 3D Meshes and Extracting Them from 2D Renderings
Innfarn Yoo, Huiwen Chang, Xiyang Luo, Ondrej Stava, Ce Liu, Peyman Milanfar, Feng Yang
Abstract
Digital watermarking is widely used for copyright protection. Traditional 3D watermarking approaches or commercial software are typically designed to embed messages into 3D meshes, and later retrieve the messages directly from distorted/undistorted watermarked 3D meshes. However, in many cases, users only have access to rendered 2D images instead of 3D meshes. Unfortunately, retrieving messages from 2D renderings of 3D meshes is still challenging and underexplored. We introduce a novel end-to-end learning framework to solve this problem through: 1) an encoder to covertly embed messages in both mesh geometry and textures; 2) a differentiable renderer to render watermarked 3D objects from different camera angles and under varied lighting conditions; 3) a decoder to recover the messages from 2D rendered images. From our experiments, we show that our model can learn to embed information visually imperceptible to humans, and to retrieve the embedded information from 2D renderings that undergo 3D distortions. In addition, we demonstrate that our method can also work with other renderers, such as ray tracers and real-time renderers with and without fine-tuning.
Ask about this paper
Your agent reads all of it.
Lune indexed this paper to the last equation, along with the top-tier papers that cite it. Ask a question and the answer quotes them.
Your agent calls
Luneget_paper_fulltext
Free to start. No credit card required.
Terminal
Install the CLIlune papers fulltext 9a3bcc91-70ce-4b7f-ae87-ae0dc957870fCited by top-tier papers11
- CopyRNeRF: Protecting the CopyRight of Neural Radiance FieldsZiyuan Luo, Qing Guo, Ka Chun Cheung, Simon See et al.ICCV 2023 · 45 citations
- GS-Hider: Hiding Messages into 3D Gaussian SplattingXuanyu Zhang, Jiarui Meng, Runyi Li, Zhipei Xu et al.NeurIPS 2024 · 43 citations
- GaussianMarker: Uncertainty-Aware Copyright Protection of 3D Gaussian SplattingXiufeng Huang, Ruiqi Li, Yiu-ming Cheung, Ka Chun Cheung et al.NeurIPS 2024 · 38 citations
- All That Glitters Is Not Gold: Key-Secured 3D Secrets within 3D Gaussian SplattingYan Ren, Shilin Lu, Adams Wai-Kin KongICLR 2026 · 16 citations
- Rethinking Mesh Watermark: Towards Highly Robust and Adaptable Deep 3D Mesh WatermarkingXingyu Zhu, Guanhui Ye, Xiapu Luo, Xuetao WeiAAAI 2024 · 14 citations
Builds on4
- Soft Rasterizer: A Differentiable Renderer for Image-Based 3D ReasoningShichen Liu, Weikai Chen, Tianye Li, Hao LiICCV 2019 · 789 citations
- Fully Convolutional Mesh Autoencoder using Efficient Spatially Varying KernelsYi Zhou, Chenglei Wu, Zimo Li, Chen Cao et al.NeurIPS 2020 · 98 citations
- Distortion Agnostic Deep WatermarkingXiyang Luo, Ruohan Zhan, Huiwen Chang, Feng Yang et al.CVPR 2020
- StegaStamp: Invisible Hyperlinks in Physical PhotographsMatthew Tancik, Ben Mildenhall, Ren NgCVPR 2020
Related papers
- WateRF: Robust Watermarks in Radiance Fields for Protection of CopyrightsYoungdong Jang, Dong In Lee, MinHyuk Jang, Jong Wook Kim et al.CVPR 2024
- 3D-GSW: 3D Gaussian Splatting for Robust WatermarkingYoungdong Jang, Hyunje Park, Feng Yang, Heeju Ko et al.CVPR 2025
- Mesh Watermark Removal Attack and Mitigation: A Novel Perspective of Function SpaceXingyu Zhu, Guanhui Ye, Chengdong Dong, Xiapu Luo et al.AAAI 2025 · 2 citations
- Flexible and Secure Watermarking for Latent Diffusion ModelCheng Xiong, Chuan Qin, Guorui Feng, Xinpeng ZhangACM MM 2023 · 50 citations
- THE SELF-RE-WATERMARKING TRAP: FROM EXPLOIT TO RESILIENCEVithurabiman Senthuran, Yong Xiang, Iynkaran Natgunanathan, Uthayasanker ThayasivamICLR 2026
