{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:E5D2MQVK5BGYTTTH3BXH3S5YV7","short_pith_number":"pith:E5D2MQVK","canonical_record":{"source":{"id":"2406.01394","kind":"arxiv","version":5},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-06-03T14:57:39Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"dac5c7965fbd4671dbab841f385db19bfc9adc485e06478e11c6ce05f4f84289","abstract_canon_sha256":"df13023e9d8095b37384a8ae9cf8b269dfb3d104a26a76b18151a49e5e848e2a"},"schema_version":"1.0"},"canonical_sha256":"2747a642aae84d89ce67d86e7dcbb8affafdfec8f03a0bc0ca4e3769ba26c2f4","source":{"kind":"arxiv","id":"2406.01394","version":5},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2406.01394","created_at":"2026-07-05T11:10:46Z"},{"alias_kind":"arxiv_version","alias_value":"2406.01394v5","created_at":"2026-07-05T11:10:46Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2406.01394","created_at":"2026-07-05T11:10:46Z"},{"alias_kind":"pith_short_12","alias_value":"E5D2MQVK5BGY","created_at":"2026-07-05T11:10:46Z"},{"alias_kind":"pith_short_16","alias_value":"E5D2MQVK5BGYTTTH","created_at":"2026-07-05T11:10:46Z"},{"alias_kind":"pith_short_8","alias_value":"E5D2MQVK","created_at":"2026-07-05T11:10:46Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:E5D2MQVK5BGYTTTH3BXH3S5YV7","target":"record","payload":{"canonical_record":{"source":{"id":"2406.01394","kind":"arxiv","version":5},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-06-03T14:57:39Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"dac5c7965fbd4671dbab841f385db19bfc9adc485e06478e11c6ce05f4f84289","abstract_canon_sha256":"df13023e9d8095b37384a8ae9cf8b269dfb3d104a26a76b18151a49e5e848e2a"},"schema_version":"1.0"},"canonical_sha256":"2747a642aae84d89ce67d86e7dcbb8affafdfec8f03a0bc0ca4e3769ba26c2f4","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:10:46.003161Z","signature_b64":"k7yiQ8awPhjoSlziqROcYjMK70q+AQExv4LBj4pxOVcwGKn0TCD/bPNvB3nux278GYLC7JNq7BJ+6K9zSDZOAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"2747a642aae84d89ce67d86e7dcbb8affafdfec8f03a0bc0ca4e3769ba26c2f4","last_reissued_at":"2026-07-05T11:10:46.002658Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:10:46.002658Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2406.01394","source_version":5,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:10:46Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Pa4qg4cabGiLmBZdJldr+msQXHVvfzXmX8rN4pwvkH4TKdZ7ZB8XTfOcWtUiNdmom5Mgvx6wiDyeU5QMDzKwAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T02:21:44.576280Z"},"content_sha256":"4b53e291943315e4706c46ac78259a0b9a25e216b84b59e114a07243cf4b18d3","schema_version":"1.0","event_id":"sha256:4b53e291943315e4706c46ac78259a0b9a25e216b84b59e114a07243cf4b18d3"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:E5D2MQVK5BGYTTTH3BXH3S5YV7","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"PrivacyRestore: Privacy-Preserving Inference in Large Language Models via Privacy Removal and Restoration","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Cen Chen, Haoran Li, Huiping Zhuang, Jianwei Wang, Junyao Yang, Zhengdong Lu, Ziqian Zeng","submitted_at":"2024-06-03T14:57:39Z","abstract_excerpt":"The widespread usage of online Large Language Models (LLMs) inference services has raised significant privacy concerns about the potential exposure of private information in user inputs to malicious eavesdroppers. Existing privacy protection methods for LLMs suffer from either insufficient privacy protection, performance degradation, or large inference time overhead. To address these limitations, we propose PrivacyRestore, a plug-and-play method to protect the privacy of user inputs during LLM inference. The server first trains restoration vectors for each privacy span and then release to clie"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2406.01394","kind":"arxiv","version":5},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2406.01394/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:10:46Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"SP2k9B37nhoo1STCrqf+oZNyF1JkNJm0XDpI8enW8IqiWJbA/otVDT52iTIFpGmBQtCRMSpu1dSns4jQNyrFDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T02:21:44.576812Z"},"content_sha256":"0579f7752a0c2d1abd5219b2a4b540d763bff2df8af34efa2968163176c7622e","schema_version":"1.0","event_id":"sha256:0579f7752a0c2d1abd5219b2a4b540d763bff2df8af34efa2968163176c7622e"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/E5D2MQVK5BGYTTTH3BXH3S5YV7/bundle.json","state_url":"https://pith.science/pith/E5D2MQVK5BGYTTTH3BXH3S5YV7/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/E5D2MQVK5BGYTTTH3BXH3S5YV7/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T02:21:44Z","links":{"resolver":"https://pith.science/pith/E5D2MQVK5BGYTTTH3BXH3S5YV7","bundle":"https://pith.science/pith/E5D2MQVK5BGYTTTH3BXH3S5YV7/bundle.json","state":"https://pith.science/pith/E5D2MQVK5BGYTTTH3BXH3S5YV7/state.json","well_known_bundle":"https://pith.science/.well-known/pith/E5D2MQVK5BGYTTTH3BXH3S5YV7/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:E5D2MQVK5BGYTTTH3BXH3S5YV7","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"df13023e9d8095b37384a8ae9cf8b269dfb3d104a26a76b18151a49e5e848e2a","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-06-03T14:57:39Z","title_canon_sha256":"dac5c7965fbd4671dbab841f385db19bfc9adc485e06478e11c6ce05f4f84289"},"schema_version":"1.0","source":{"id":"2406.01394","kind":"arxiv","version":5}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2406.01394","created_at":"2026-07-05T11:10:46Z"},{"alias_kind":"arxiv_version","alias_value":"2406.01394v5","created_at":"2026-07-05T11:10:46Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2406.01394","created_at":"2026-07-05T11:10:46Z"},{"alias_kind":"pith_short_12","alias_value":"E5D2MQVK5BGY","created_at":"2026-07-05T11:10:46Z"},{"alias_kind":"pith_short_16","alias_value":"E5D2MQVK5BGYTTTH","created_at":"2026-07-05T11:10:46Z"},{"alias_kind":"pith_short_8","alias_value":"E5D2MQVK","created_at":"2026-07-05T11:10:46Z"}],"graph_snapshots":[{"event_id":"sha256:0579f7752a0c2d1abd5219b2a4b540d763bff2df8af34efa2968163176c7622e","target":"graph","created_at":"2026-07-05T11:10:46Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2406.01394/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The widespread usage of online Large Language Models (LLMs) inference services has raised significant privacy concerns about the potential exposure of private information in user inputs to malicious eavesdroppers. Existing privacy protection methods for LLMs suffer from either insufficient privacy protection, performance degradation, or large inference time overhead. To address these limitations, we propose PrivacyRestore, a plug-and-play method to protect the privacy of user inputs during LLM inference. The server first trains restoration vectors for each privacy span and then release to clie","authors_text":"Cen Chen, Haoran Li, Huiping Zhuang, Jianwei Wang, Junyao Yang, Zhengdong Lu, Ziqian Zeng","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-06-03T14:57:39Z","title":"PrivacyRestore: Privacy-Preserving Inference in Large Language Models via Privacy Removal and Restoration"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2406.01394","kind":"arxiv","version":5},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:4b53e291943315e4706c46ac78259a0b9a25e216b84b59e114a07243cf4b18d3","target":"record","created_at":"2026-07-05T11:10:46Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"df13023e9d8095b37384a8ae9cf8b269dfb3d104a26a76b18151a49e5e848e2a","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-06-03T14:57:39Z","title_canon_sha256":"dac5c7965fbd4671dbab841f385db19bfc9adc485e06478e11c6ce05f4f84289"},"schema_version":"1.0","source":{"id":"2406.01394","kind":"arxiv","version":5}},"canonical_sha256":"2747a642aae84d89ce67d86e7dcbb8affafdfec8f03a0bc0ca4e3769ba26c2f4","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"2747a642aae84d89ce67d86e7dcbb8affafdfec8f03a0bc0ca4e3769ba26c2f4","first_computed_at":"2026-07-05T11:10:46.002658Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:10:46.002658Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"k7yiQ8awPhjoSlziqROcYjMK70q+AQExv4LBj4pxOVcwGKn0TCD/bPNvB3nux278GYLC7JNq7BJ+6K9zSDZOAg==","signature_status":"signed_v1","signed_at":"2026-07-05T11:10:46.003161Z","signed_message":"canonical_sha256_bytes"},"source_id":"2406.01394","source_kind":"arxiv","source_version":5}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:4b53e291943315e4706c46ac78259a0b9a25e216b84b59e114a07243cf4b18d3","sha256:0579f7752a0c2d1abd5219b2a4b540d763bff2df8af34efa2968163176c7622e"],"state_sha256":"c648ff39fc3a4fbb95f2261c33c0f5ebb2cb01a53b156bdaf09af028a874366e"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"CuwuFgihfmXt7omSges3vtUnVVSPZ6Cp+jYZxPFXip/AFlyGVadpnJj0OzEw0Tyy0fWFOvncqLGnxOSAJ7xJBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T02:21:44.580618Z","bundle_sha256":"e3aa959ed2a9da56edd24e561a6dbf7e6107339c8ef172ff09d3b67aab1f84b2"}}