Abstract:
Systems, methods, and computer program products for determining an attack on a neural network. A data sample is received at a first classifier neural network and at a watermark classifier neural network, wherein the first classifier neural network is trained using a first dataset and a watermark dataset. The first classifier neural network determines a classification label for the data sample. A watermark classifier neural network determines a watermark classification label for the data sample. A data sample is determined as an adversarial data sample based on the classification label for the data sample and the watermark classification label for the data sample.
Abstract:
Embedding a watermark payload in content, including: a counter configured to store a random seed; a permutation generator configured to receive and process the watermark payload and the random seed, and generate a shuffled payload based on the random seed; and a watermark embedder configured to receive and embed the shuffled payload into the content. Key words include watermark payload and collusion.
Abstract:
A device comprises an image handling module for protecting an image of a scene captured by a camera. The image handling module is configured detect, in association with the image, a watermark signal having been embedded in light illuminating the scene at a respective geographic location. Further, the image handling module is configured to lookup the detected watermark signal in a privacy database, and based thereon to selectively inhibit use of the image.
Abstract:
The present disclosure is generally directed to a method and computing device for determining whether a mark is genuine. According to various implementations, a computing device (or logic circuitry thereof) uses unintentionally-produced artifacts within a genuine mark to define an identifiable electronic signature, extracts certain attributes of the signature (such as deviation from the mean value for each band of the signature), and assigns numerical values to the extracted attributes in order to create a hash identifier that is significantly smaller than the electronic signature itself. The hash identifier is then used as an index for a database of electronic signatures (of genuine marks) to enhance the ease and speed with which numerous genuine signatures can be searched (e.g., in a database) and compared with signatures (of candidate marks.
Abstract:
Among other things, at a cloud-based service, digital image files are received from which digital images can be displayed on devices. For each of the digital image files, data is embedded in the digital image file on behalf of a party who has rights in the digital image file. The existence of the embedded data is not perceptible in any digital image that is displayed using the digital image file. The embedded data includes information from which the digital image file can be authenticated. At the cloud-based service, a digital image file is received that is to be authenticated. The digital image file is authenticated based on the embedded data.
Abstract:
Multiple transform utilization and applications for secure digital watermarking In one embodiment of the present invention, digital blocks in digital information to be protected are transformed into the frequency domain using a fast Fourier transform. A plurality of frequencies and associated amplitudes are identified for each of the transformed digital blocks and a subset of the identified amplitudes is selected for each of the digital blocks using a primary mask from a key. Message information is selected from a message using a transformation table generated with a convolution mask. The chosen message information is encoded into each of the transformed digital blocks by altering the selected amplitudes based on the selected message information.
Abstract:
A method and apparatus are described including generating a unique code for each of a plurality of users using a plurality of symbols, generating a plurality of codes representing the plurality of symbols, substituting the plurality of codes into the unique code for each of the plurality of users, permuting the code resulting from the substitution to produce a codeword for each of the plurality of users and embedding the codeword into digital content. The second generating act further includes generating a string of first symbols followed by second symbols, wherein the first symbols are all ones and the second symbols are all negative ones, wherein a number of first symbols is equal to a number of the second symbols, and wherein if a length of the first symbols followed by the second symbols is less than a length of the code, then the first symbols followed by the second symbols are repeated until the code length is filled.
Abstract:
A method and system for embedding data in video frames is described, the method comprising receiving marking information, representing the marking information as a 2-coordinate vector, denoted ω, where the 2-coordinates are denoted, respectively, α, β, such that ω=(α, β), providing a video frame to be marked, the video frame including a plurality of pixels, each pixel of the plurality of pixels being represented as p, where p=(x, y), x and y including coordinates of pixel p, the plurality of pixels being represented as a triad of color elements, denoted, respectively, as R, G, and B, and marking the video frame by transforming each pixel among the plurality of pixels as follows R′(p)=R(p)+R>, G′(p)=G(p)+G>, and B′(p)=B(p)+B>, where R> represents a dot product operation on p and ωR, G> represents a dot product operation on p and ωG, and B> represents a dot product operation on p and ωB.
Abstract:
Residue calculating sections respectively obtain residues which take a plurality of integers as modulus, with respect to a user ID. The plurality of integers are stored in modulus storage sections and are prime to each other. Based on these residues and parameters stored in a coding parameter storage section, component codes constructed by continuous sequences of 1 and 0 using a predetermined number of bits as a unit are respectively generated by component code generating sections. These component codes are concatenated by a concatenating section, thereby to obtain a code to be embedded, which constructs watermark information.
Abstract:
Systems and methods are described that desynchronize a video to be protected, thereby creating one or more digitally fingerprinted videos. In one implementation, a video to be protected is temporally desynchronized and spatially desynchronized. A fingerprinted copy of the video, as modified by the temporal and spatial desynchronizations, is created.