{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:7O3GUZ374227USR7HFDXJJFCIS","short_pith_number":"pith:7O3GUZ37","canonical_record":{"source":{"id":"2106.06916","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/publicdomain/zero/1.0/","primary_cat":"cs.LG","submitted_at":"2021-06-13T04:57:16Z","cross_cats_sorted":["stat.ML"],"title_canon_sha256":"9dead41a9b3197423fbe71e6e50c5b0508b8f0d22b986ef34ef3a8d9c470a41b","abstract_canon_sha256":"da68ffedf8ce00b6d4b4b45acd1c0a47c62a7978656dc2e70ddffa2a8acc12cb"},"schema_version":"1.0"},"canonical_sha256":"fbb66a677fe6b5fa4a3f394774a4a244a7f31da9a5aa3d4252761d65d373c897","source":{"kind":"arxiv","id":"2106.06916","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2106.06916","created_at":"2026-07-05T04:00:15Z"},{"alias_kind":"arxiv_version","alias_value":"2106.06916v2","created_at":"2026-07-05T04:00:15Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2106.06916","created_at":"2026-07-05T04:00:15Z"},{"alias_kind":"pith_short_12","alias_value":"7O3GUZ374227","created_at":"2026-07-05T04:00:15Z"},{"alias_kind":"pith_short_16","alias_value":"7O3GUZ374227USR7","created_at":"2026-07-05T04:00:15Z"},{"alias_kind":"pith_short_8","alias_value":"7O3GUZ37","created_at":"2026-07-05T04:00:15Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:7O3GUZ374227USR7HFDXJJFCIS","target":"record","payload":{"canonical_record":{"source":{"id":"2106.06916","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/publicdomain/zero/1.0/","primary_cat":"cs.LG","submitted_at":"2021-06-13T04:57:16Z","cross_cats_sorted":["stat.ML"],"title_canon_sha256":"9dead41a9b3197423fbe71e6e50c5b0508b8f0d22b986ef34ef3a8d9c470a41b","abstract_canon_sha256":"da68ffedf8ce00b6d4b4b45acd1c0a47c62a7978656dc2e70ddffa2a8acc12cb"},"schema_version":"1.0"},"canonical_sha256":"fbb66a677fe6b5fa4a3f394774a4a244a7f31da9a5aa3d4252761d65d373c897","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:00:15.199397Z","signature_b64":"WJ2B7xCjsCgUk9VtkHjtUQ/Ukr/TRnLNNhCUEwSbHpAwMwKSBebNSRXmAF3vb6UTptpGFsSjRY8LZOhdGpN4BA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"fbb66a677fe6b5fa4a3f394774a4a244a7f31da9a5aa3d4252761d65d373c897","last_reissued_at":"2026-07-05T04:00:15.199015Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:00:15.199015Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2106.06916","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:00:15Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"fvg4ml4mHKa6sj74v8XwkeRF0K81xx9f0CrchrDX/zZnsFx6P1xLRY5T3GRISP+ycGetdBtauB7sDixc6YUqBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T03:20:13.960157Z"},"content_sha256":"4a41c2bed1761324577b2f6616754cb9c7c399f4baecaf99712cb57dd0cd8480","schema_version":"1.0","event_id":"sha256:4a41c2bed1761324577b2f6616754cb9c7c399f4baecaf99712cb57dd0cd8480"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:7O3GUZ374227USR7HFDXJJFCIS","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Non-Transferable Learning: A New Approach for Model Ownership Verification and Applicability Authorization","license":"http://creativecommons.org/publicdomain/zero/1.0/","headline":"","cross_cats":["stat.ML"],"primary_cat":"cs.LG","authors_text":"Lixu Wang, Qi Zhu, Ruiqi Xu, Shichao Xu, Xiao Wang","submitted_at":"2021-06-13T04:57:16Z","abstract_excerpt":"As Artificial Intelligence as a Service gains popularity, protecting well-trained models as intellectual property is becoming increasingly important. There are two common types of protection methods: ownership verification and usage authorization. In this paper, we propose Non-Transferable Learning (NTL), a novel approach that captures the exclusive data representation in the learned model and restricts the model generalization ability to certain domains. This approach provides effective solutions to both model verification and authorization. Specifically: 1) For ownership verification, waterm"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2106.06916","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2106.06916/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:00:15Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Lj7l/d5NrrUx1V8vbESpym94V3Y41TIDpi4CMEVJFs7gZgMfG3Ar93ofIruQnWvn9TeqPfYWRtusPB4flSxoCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T03:20:13.961244Z"},"content_sha256":"2c5a296cad31a220d082cf922af35a15febdf2eeac9177522d26ffb91615a2d7","schema_version":"1.0","event_id":"sha256:2c5a296cad31a220d082cf922af35a15febdf2eeac9177522d26ffb91615a2d7"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/7O3GUZ374227USR7HFDXJJFCIS/bundle.json","state_url":"https://pith.science/pith/7O3GUZ374227USR7HFDXJJFCIS/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/7O3GUZ374227USR7HFDXJJFCIS/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T03:20:13Z","links":{"resolver":"https://pith.science/pith/7O3GUZ374227USR7HFDXJJFCIS","bundle":"https://pith.science/pith/7O3GUZ374227USR7HFDXJJFCIS/bundle.json","state":"https://pith.science/pith/7O3GUZ374227USR7HFDXJJFCIS/state.json","well_known_bundle":"https://pith.science/.well-known/pith/7O3GUZ374227USR7HFDXJJFCIS/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:7O3GUZ374227USR7HFDXJJFCIS","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"da68ffedf8ce00b6d4b4b45acd1c0a47c62a7978656dc2e70ddffa2a8acc12cb","cross_cats_sorted":["stat.ML"],"license":"http://creativecommons.org/publicdomain/zero/1.0/","primary_cat":"cs.LG","submitted_at":"2021-06-13T04:57:16Z","title_canon_sha256":"9dead41a9b3197423fbe71e6e50c5b0508b8f0d22b986ef34ef3a8d9c470a41b"},"schema_version":"1.0","source":{"id":"2106.06916","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2106.06916","created_at":"2026-07-05T04:00:15Z"},{"alias_kind":"arxiv_version","alias_value":"2106.06916v2","created_at":"2026-07-05T04:00:15Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2106.06916","created_at":"2026-07-05T04:00:15Z"},{"alias_kind":"pith_short_12","alias_value":"7O3GUZ374227","created_at":"2026-07-05T04:00:15Z"},{"alias_kind":"pith_short_16","alias_value":"7O3GUZ374227USR7","created_at":"2026-07-05T04:00:15Z"},{"alias_kind":"pith_short_8","alias_value":"7O3GUZ37","created_at":"2026-07-05T04:00:15Z"}],"graph_snapshots":[{"event_id":"sha256:2c5a296cad31a220d082cf922af35a15febdf2eeac9177522d26ffb91615a2d7","target":"graph","created_at":"2026-07-05T04:00:15Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2106.06916/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"As Artificial Intelligence as a Service gains popularity, protecting well-trained models as intellectual property is becoming increasingly important. There are two common types of protection methods: ownership verification and usage authorization. In this paper, we propose Non-Transferable Learning (NTL), a novel approach that captures the exclusive data representation in the learned model and restricts the model generalization ability to certain domains. This approach provides effective solutions to both model verification and authorization. Specifically: 1) For ownership verification, waterm","authors_text":"Lixu Wang, Qi Zhu, Ruiqi Xu, Shichao Xu, Xiao Wang","cross_cats":["stat.ML"],"headline":"","license":"http://creativecommons.org/publicdomain/zero/1.0/","primary_cat":"cs.LG","submitted_at":"2021-06-13T04:57:16Z","title":"Non-Transferable Learning: A New Approach for Model Ownership Verification and Applicability Authorization"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2106.06916","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:4a41c2bed1761324577b2f6616754cb9c7c399f4baecaf99712cb57dd0cd8480","target":"record","created_at":"2026-07-05T04:00:15Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"da68ffedf8ce00b6d4b4b45acd1c0a47c62a7978656dc2e70ddffa2a8acc12cb","cross_cats_sorted":["stat.ML"],"license":"http://creativecommons.org/publicdomain/zero/1.0/","primary_cat":"cs.LG","submitted_at":"2021-06-13T04:57:16Z","title_canon_sha256":"9dead41a9b3197423fbe71e6e50c5b0508b8f0d22b986ef34ef3a8d9c470a41b"},"schema_version":"1.0","source":{"id":"2106.06916","kind":"arxiv","version":2}},"canonical_sha256":"fbb66a677fe6b5fa4a3f394774a4a244a7f31da9a5aa3d4252761d65d373c897","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"fbb66a677fe6b5fa4a3f394774a4a244a7f31da9a5aa3d4252761d65d373c897","first_computed_at":"2026-07-05T04:00:15.199015Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:00:15.199015Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"WJ2B7xCjsCgUk9VtkHjtUQ/Ukr/TRnLNNhCUEwSbHpAwMwKSBebNSRXmAF3vb6UTptpGFsSjRY8LZOhdGpN4BA==","signature_status":"signed_v1","signed_at":"2026-07-05T04:00:15.199397Z","signed_message":"canonical_sha256_bytes"},"source_id":"2106.06916","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:4a41c2bed1761324577b2f6616754cb9c7c399f4baecaf99712cb57dd0cd8480","sha256:2c5a296cad31a220d082cf922af35a15febdf2eeac9177522d26ffb91615a2d7"],"state_sha256":"d61b78dc51ac57de469da65dae43f3f9c11c86862c4002fbded1c6a9d2421f76"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"JGIX7ofb+8qyzV9TdZgUf9bqfBNc1fkEFXW14bG87vQ6S8qsx24xEJlwYg5Vg+fxHK+I5yWdVbZIjNyRFlzYBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T03:20:14.054903Z","bundle_sha256":"831251dddabb213e3f9945500d37d94b0246023e14d0cd8ddd8a0cc5c9cc7149"}}