Consensus Learning with Multi-Party Perturbation Triggers for Secure Model Access
Yizhun Zhang, Jie Huang, Zeping Zhang, Shuaishuai Zhang, Changhao Ding, Xuan Chen
Abstract
With the widespread deployment of deep learning models in multi-party collaborative scenarios, the issues of secure model access control and intellectual property (IP) protection have become increasingly critical. To address the limitations of existing methods that lack proactive defense mechanisms in such settings, this paper introduces a novel paradigm Consensus Learning which enables fine-grained control over model execution permissions via a multi-party joint authorization mechanism. Building on this, we propose the Collaborative Perturbation Trigger Method (CPTM), which allows participating parties to collaboratively generate perturbation-based trigger data that embed identity features. The model can only be activated using the collectively constructed trigger, enforcing tightly bound access control without modifying the model architecture. Extensive experiments on CIFAR-10, CIFAR-100, MNIST, and Face-LFW datasets demonstrate that the proposed method maintains prediction accuracy within 2% of the baseline unprotected models on authorized data. In contrast, under unauthorized or adversarial inputs, model accuracy drops below 10%, showcasing strong access control capabilities and robustness. This study offers a novel direction for building scalable, robust, and proactively protected deep learning models in multi-party collaborative environments.
Ask about this paper
Your agent reads all of it.
Lune indexed this paper to the last equation, along with the top-tier papers that cite it. Ask a question and the answer quotes them.
Your agent calls
Luneget_paper_fulltext
Free to start. No credit card required.
Terminal
Install the CLIlune papers fulltext f335a498-c3ab-4752-b96d-4d4375f92978Builds on10
- Provably Secure Federated Learning against Malicious ClientsXiaoyu Cao, Jinyuan Jia, Neil Zhenqiang GongAAAI 2021 · 161 citations
- RIGA: Covert and Robust White-Box Watermarking of Deep Neural NetworksTianhao Wang, Florian KerschbaumWWW 2021 · 128 citations
- Protecting Intellectual Property of Language Generation APIs with Lexical WatermarkXuanli He, Qiongkai Xu, Lingjuan Lyu, Fangzhao Wu et al.AAAI 2022 · 124 citations
- Defending against Model Stealing via Verifying Embedded External FeaturesYiming Li, Linghui Zhu, Xiaojun Jia, Yong Jiang et al.AAAI 2022 · 87 citations
- DeepAuth: A DNN Authentication Framework by Model-Unique and Fragile Signature EmbeddingYingjie Lao, Weijie Zhao, Peng Yang, Ping LiAAAI 2022 · 34 citations
Related papers
- ActiveDaemon: Unconscious DNN Dormancy and Waking Up via User-specific Invisible TokenGe Ren, Gaolei Li, Shenghong Li, Libo Chen et al.NDSS 2024
- Echoes of Ownership: Adversarial-Guided Dual Injection for Copyright Protection in MLLMsChengwei Xia, Fan Ma, Ruijie Quan, Yunqiu Xu et al.CVPR 2026 · 2 citations
- Authority Backdoor: A Certifiable Backdoor Mechanism for Authoring DNNsHan Yang, Shaofeng Li, Tian Dong, Xiangyu Xu et al.AAAI 2026
- MAP: MAsk-Pruning for Source-Free Model Intellectual Property ProtectionBoyang Peng, Sanqing Qu, Yong Wu, Tianpei Zou et al.CVPR 2024 · 6 citations
- Deep Neural Network Watermarking against Model Extraction AttackJingxuan Tan, Nan Zhong, Zhenxing Qian, Xinpeng Zhang et al.ACM MM 2023 · 34 citations
