{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:6LRW7JXUW2B3POXEPGBZN5DXGT","short_pith_number":"pith:6LRW7JXU","canonical_record":{"source":{"id":"2212.11133","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-12-21T15:58:42Z","cross_cats_sorted":[],"title_canon_sha256":"ef7e0795b8a6b99840fe2a5d55e869104e48c9434cc8356422718aeee5a8bea9","abstract_canon_sha256":"692ae37494a6844552582e13c75f336cd472c5779e40961004f36eef16c0349a"},"schema_version":"1.0"},"canonical_sha256":"f2e36fa6f4b683b7bae4798396f47734c46f067200f6304f1fee7e8d17aebecf","source":{"kind":"arxiv","id":"2212.11133","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2212.11133","created_at":"2026-07-05T05:27:27Z"},{"alias_kind":"arxiv_version","alias_value":"2212.11133v1","created_at":"2026-07-05T05:27:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2212.11133","created_at":"2026-07-05T05:27:27Z"},{"alias_kind":"pith_short_12","alias_value":"6LRW7JXUW2B3","created_at":"2026-07-05T05:27:27Z"},{"alias_kind":"pith_short_16","alias_value":"6LRW7JXUW2B3POXE","created_at":"2026-07-05T05:27:27Z"},{"alias_kind":"pith_short_8","alias_value":"6LRW7JXU","created_at":"2026-07-05T05:27:27Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:6LRW7JXUW2B3POXEPGBZN5DXGT","target":"record","payload":{"canonical_record":{"source":{"id":"2212.11133","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-12-21T15:58:42Z","cross_cats_sorted":[],"title_canon_sha256":"ef7e0795b8a6b99840fe2a5d55e869104e48c9434cc8356422718aeee5a8bea9","abstract_canon_sha256":"692ae37494a6844552582e13c75f336cd472c5779e40961004f36eef16c0349a"},"schema_version":"1.0"},"canonical_sha256":"f2e36fa6f4b683b7bae4798396f47734c46f067200f6304f1fee7e8d17aebecf","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:27:27.636095Z","signature_b64":"6MkIszXdYaYzPDloDieGmiY/XYEq6w1dV24eOva+q5YlPHRyng8q+70dPzNjGaAE/+HqS0UUKSt+v+hry9ICDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"f2e36fa6f4b683b7bae4798396f47734c46f067200f6304f1fee7e8d17aebecf","last_reissued_at":"2026-07-05T05:27:27.635611Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:27:27.635611Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2212.11133","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:27:27Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"O4CxDpLtLI7S4kTjSqdXwuBc46cIcRnZmkPaI5xLrUl3KCaSdJ16OGGsVvPHSNQrgBK8mQ20a2aRTkK5iDOuBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-18T04:54:36.638327Z"},"content_sha256":"33911e9b32e7933d50d33e54c0dede83a16c304585dfeb4815277833fefda13b","schema_version":"1.0","event_id":"sha256:33911e9b32e7933d50d33e54c0dede83a16c304585dfeb4815277833fefda13b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:6LRW7JXUW2B3POXEPGBZN5DXGT","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Device-Bind Key-Storageless Hardware AI Model IP Protection: A PUF and Permute-Diffusion Encryption-Enabled Approach","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Jun Wu, Kaoru Ota, Mianxiong Dong, Qianqian Pan","submitted_at":"2022-12-21T15:58:42Z","abstract_excerpt":"Machine learning as a service (MLaaS) framework provides intelligent services or well-trained artificial intelligence (AI) models for local devices. However, in the process of model transmission and deployment, there are security issues, i.e. AI model leakage due to the unreliable transmission environments and illegal abuse at local devices without permission. Although existing works study the intellectual property (IP) protection of AI models, they mainly focus on the watermark-based and encryption-based methods and have the following problems: (i) The watermark-based methods only provide pas"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2212.11133","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2212.11133/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:27:27Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"6skoDi40e7rdkmMqQrNnUU8PxpiBaYxwx6Lg72Jkad9wBg52wxZUu1AxmExWUaswz4GG75GytuFE7XnoCbKEDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-18T04:54:36.638822Z"},"content_sha256":"395c2e47286b535fd99981a28e28be4fe1a2679ece912ed338d81c0624785870","schema_version":"1.0","event_id":"sha256:395c2e47286b535fd99981a28e28be4fe1a2679ece912ed338d81c0624785870"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/6LRW7JXUW2B3POXEPGBZN5DXGT/bundle.json","state_url":"https://pith.science/pith/6LRW7JXUW2B3POXEPGBZN5DXGT/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/6LRW7JXUW2B3POXEPGBZN5DXGT/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-18T04:54:36Z","links":{"resolver":"https://pith.science/pith/6LRW7JXUW2B3POXEPGBZN5DXGT","bundle":"https://pith.science/pith/6LRW7JXUW2B3POXEPGBZN5DXGT/bundle.json","state":"https://pith.science/pith/6LRW7JXUW2B3POXEPGBZN5DXGT/state.json","well_known_bundle":"https://pith.science/.well-known/pith/6LRW7JXUW2B3POXEPGBZN5DXGT/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:6LRW7JXUW2B3POXEPGBZN5DXGT","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"692ae37494a6844552582e13c75f336cd472c5779e40961004f36eef16c0349a","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-12-21T15:58:42Z","title_canon_sha256":"ef7e0795b8a6b99840fe2a5d55e869104e48c9434cc8356422718aeee5a8bea9"},"schema_version":"1.0","source":{"id":"2212.11133","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2212.11133","created_at":"2026-07-05T05:27:27Z"},{"alias_kind":"arxiv_version","alias_value":"2212.11133v1","created_at":"2026-07-05T05:27:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2212.11133","created_at":"2026-07-05T05:27:27Z"},{"alias_kind":"pith_short_12","alias_value":"6LRW7JXUW2B3","created_at":"2026-07-05T05:27:27Z"},{"alias_kind":"pith_short_16","alias_value":"6LRW7JXUW2B3POXE","created_at":"2026-07-05T05:27:27Z"},{"alias_kind":"pith_short_8","alias_value":"6LRW7JXU","created_at":"2026-07-05T05:27:27Z"}],"graph_snapshots":[{"event_id":"sha256:395c2e47286b535fd99981a28e28be4fe1a2679ece912ed338d81c0624785870","target":"graph","created_at":"2026-07-05T05:27:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2212.11133/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Machine learning as a service (MLaaS) framework provides intelligent services or well-trained artificial intelligence (AI) models for local devices. However, in the process of model transmission and deployment, there are security issues, i.e. AI model leakage due to the unreliable transmission environments and illegal abuse at local devices without permission. Although existing works study the intellectual property (IP) protection of AI models, they mainly focus on the watermark-based and encryption-based methods and have the following problems: (i) The watermark-based methods only provide pas","authors_text":"Jun Wu, Kaoru Ota, Mianxiong Dong, Qianqian Pan","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-12-21T15:58:42Z","title":"Device-Bind Key-Storageless Hardware AI Model IP Protection: A PUF and Permute-Diffusion Encryption-Enabled Approach"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2212.11133","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:33911e9b32e7933d50d33e54c0dede83a16c304585dfeb4815277833fefda13b","target":"record","created_at":"2026-07-05T05:27:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"692ae37494a6844552582e13c75f336cd472c5779e40961004f36eef16c0349a","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-12-21T15:58:42Z","title_canon_sha256":"ef7e0795b8a6b99840fe2a5d55e869104e48c9434cc8356422718aeee5a8bea9"},"schema_version":"1.0","source":{"id":"2212.11133","kind":"arxiv","version":1}},"canonical_sha256":"f2e36fa6f4b683b7bae4798396f47734c46f067200f6304f1fee7e8d17aebecf","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"f2e36fa6f4b683b7bae4798396f47734c46f067200f6304f1fee7e8d17aebecf","first_computed_at":"2026-07-05T05:27:27.635611Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:27:27.635611Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"6MkIszXdYaYzPDloDieGmiY/XYEq6w1dV24eOva+q5YlPHRyng8q+70dPzNjGaAE/+HqS0UUKSt+v+hry9ICDg==","signature_status":"signed_v1","signed_at":"2026-07-05T05:27:27.636095Z","signed_message":"canonical_sha256_bytes"},"source_id":"2212.11133","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:33911e9b32e7933d50d33e54c0dede83a16c304585dfeb4815277833fefda13b","sha256:395c2e47286b535fd99981a28e28be4fe1a2679ece912ed338d81c0624785870"],"state_sha256":"7475a0371af1752c8fbcdb8d1eac997079e92a792a817f52d77ddba7ba92b982"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"NleyIR6YKSBgp1m7fMOS01lm6NfIsetL3GKAK10X5qMdZt+m8rD6ROLKYlrSA9y+WHOu84wtZUGU9DErcoqLAw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-18T04:54:36.642856Z","bundle_sha256":"de45f340f04152e155a4548a87ea833f1de5e6a36e8896af882c54ba0fd8331f"}}