{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:I4GL6DWDI3HDDMWSZTXKTDSTIP","short_pith_number":"pith:I4GL6DWD","canonical_record":{"source":{"id":"1912.03485","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-12-07T10:27:33Z","cross_cats_sorted":["cs.CR","cs.CV","stat.ML"],"title_canon_sha256":"2cf420012366235b64ab3038aee12e1de428046aa46c62a67c9d5d3565919dcc","abstract_canon_sha256":"fb28b475c74634b51590eee0c79039c95f7e33b49b952981640f8f728daaafc7"},"schema_version":"1.0"},"canonical_sha256":"470cbf0ec346ce31b2d2cceea98e5343ca11cd2a89daa9f77e4f46ad44526519","source":{"kind":"arxiv","id":"1912.03485","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1912.03485","created_at":"2026-07-05T00:24:46Z"},{"alias_kind":"arxiv_version","alias_value":"1912.03485v1","created_at":"2026-07-05T00:24:46Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1912.03485","created_at":"2026-07-05T00:24:46Z"},{"alias_kind":"pith_short_12","alias_value":"I4GL6DWDI3HD","created_at":"2026-07-05T00:24:46Z"},{"alias_kind":"pith_short_16","alias_value":"I4GL6DWDI3HDDMWS","created_at":"2026-07-05T00:24:46Z"},{"alias_kind":"pith_short_8","alias_value":"I4GL6DWD","created_at":"2026-07-05T00:24:46Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:I4GL6DWDI3HDDMWSZTXKTDSTIP","target":"record","payload":{"canonical_record":{"source":{"id":"1912.03485","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-12-07T10:27:33Z","cross_cats_sorted":["cs.CR","cs.CV","stat.ML"],"title_canon_sha256":"2cf420012366235b64ab3038aee12e1de428046aa46c62a67c9d5d3565919dcc","abstract_canon_sha256":"fb28b475c74634b51590eee0c79039c95f7e33b49b952981640f8f728daaafc7"},"schema_version":"1.0"},"canonical_sha256":"470cbf0ec346ce31b2d2cceea98e5343ca11cd2a89daa9f77e4f46ad44526519","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T00:24:46.087596Z","signature_b64":"VynTO50TLxOAfaz/SbZmEIqoLqde8pyz18b4XnzZzMYTQ2HKEZK8UuozC9woHYIpY3vjCVYNQ8C4W8ZT0+ZnBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"470cbf0ec346ce31b2d2cceea98e5343ca11cd2a89daa9f77e4f46ad44526519","last_reissued_at":"2026-07-05T00:24:46.087126Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T00:24:46.087126Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1912.03485","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:24:46Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"efOhBMdNvqsKJYsgDwWSXt1sYUYqsEcURhoaiS7lMXQ+2UQLIoZMvhNgXSplk+3D21XUWY986JFE/LEpDtreCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-10T09:00:37.259809Z"},"content_sha256":"b43d5ae7429d19732a7974083d9318bf2db517a3f1020e69c858c32731fe2127","schema_version":"1.0","event_id":"sha256:b43d5ae7429d19732a7974083d9318bf2db517a3f1020e69c858c32731fe2127"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:I4GL6DWDI3HDDMWSZTXKTDSTIP","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Privacy-Preserving Inference in Machine Learning Services Using Trusted Execution Environments","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","cs.CV","stat.ML"],"primary_cat":"cs.LG","authors_text":"Keshav Balasubramaniam, Krishna Giri Narra, Murali Annavaram, Yongqin Wang, Zhifeng Lin","submitted_at":"2019-12-07T10:27:33Z","abstract_excerpt":"This work presents Origami, which provides privacy-preserving inference for large deep neural network (DNN) models through a combination of enclave execution, cryptographic blinding, interspersed with accelerator-based computation. Origami partitions the ML model into multiple partitions. The first partition receives the encrypted user input within an SGX enclave. The enclave decrypts the input and then applies cryptographic blinding to the input data and the model parameters. Cryptographic blinding is a technique that adds noise to obfuscate data. Origami sends the obfuscated data for computa"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1912.03485","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1912.03485/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:24:46Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"I6kr53dmGE0Vsk+NL7a5bXoJTNk7vRImZAvyWDlm3AgUUsar4Tbd2NpUgQXvcyS3vuiRloMX4gtdDsCF81WODA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-10T09:00:37.260188Z"},"content_sha256":"6c15cd82c29808330e67f07914c3b9a54cde3af7ad896a4aa3496686ea04e646","schema_version":"1.0","event_id":"sha256:6c15cd82c29808330e67f07914c3b9a54cde3af7ad896a4aa3496686ea04e646"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/I4GL6DWDI3HDDMWSZTXKTDSTIP/bundle.json","state_url":"https://pith.science/pith/I4GL6DWDI3HDDMWSZTXKTDSTIP/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/I4GL6DWDI3HDDMWSZTXKTDSTIP/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-10T09:00:37Z","links":{"resolver":"https://pith.science/pith/I4GL6DWDI3HDDMWSZTXKTDSTIP","bundle":"https://pith.science/pith/I4GL6DWDI3HDDMWSZTXKTDSTIP/bundle.json","state":"https://pith.science/pith/I4GL6DWDI3HDDMWSZTXKTDSTIP/state.json","well_known_bundle":"https://pith.science/.well-known/pith/I4GL6DWDI3HDDMWSZTXKTDSTIP/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:I4GL6DWDI3HDDMWSZTXKTDSTIP","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"fb28b475c74634b51590eee0c79039c95f7e33b49b952981640f8f728daaafc7","cross_cats_sorted":["cs.CR","cs.CV","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-12-07T10:27:33Z","title_canon_sha256":"2cf420012366235b64ab3038aee12e1de428046aa46c62a67c9d5d3565919dcc"},"schema_version":"1.0","source":{"id":"1912.03485","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1912.03485","created_at":"2026-07-05T00:24:46Z"},{"alias_kind":"arxiv_version","alias_value":"1912.03485v1","created_at":"2026-07-05T00:24:46Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1912.03485","created_at":"2026-07-05T00:24:46Z"},{"alias_kind":"pith_short_12","alias_value":"I4GL6DWDI3HD","created_at":"2026-07-05T00:24:46Z"},{"alias_kind":"pith_short_16","alias_value":"I4GL6DWDI3HDDMWS","created_at":"2026-07-05T00:24:46Z"},{"alias_kind":"pith_short_8","alias_value":"I4GL6DWD","created_at":"2026-07-05T00:24:46Z"}],"graph_snapshots":[{"event_id":"sha256:6c15cd82c29808330e67f07914c3b9a54cde3af7ad896a4aa3496686ea04e646","target":"graph","created_at":"2026-07-05T00:24:46Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1912.03485/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"This work presents Origami, which provides privacy-preserving inference for large deep neural network (DNN) models through a combination of enclave execution, cryptographic blinding, interspersed with accelerator-based computation. Origami partitions the ML model into multiple partitions. The first partition receives the encrypted user input within an SGX enclave. The enclave decrypts the input and then applies cryptographic blinding to the input data and the model parameters. Cryptographic blinding is a technique that adds noise to obfuscate data. Origami sends the obfuscated data for computa","authors_text":"Keshav Balasubramaniam, Krishna Giri Narra, Murali Annavaram, Yongqin Wang, Zhifeng Lin","cross_cats":["cs.CR","cs.CV","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-12-07T10:27:33Z","title":"Privacy-Preserving Inference in Machine Learning Services Using Trusted Execution Environments"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1912.03485","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b43d5ae7429d19732a7974083d9318bf2db517a3f1020e69c858c32731fe2127","target":"record","created_at":"2026-07-05T00:24:46Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"fb28b475c74634b51590eee0c79039c95f7e33b49b952981640f8f728daaafc7","cross_cats_sorted":["cs.CR","cs.CV","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-12-07T10:27:33Z","title_canon_sha256":"2cf420012366235b64ab3038aee12e1de428046aa46c62a67c9d5d3565919dcc"},"schema_version":"1.0","source":{"id":"1912.03485","kind":"arxiv","version":1}},"canonical_sha256":"470cbf0ec346ce31b2d2cceea98e5343ca11cd2a89daa9f77e4f46ad44526519","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"470cbf0ec346ce31b2d2cceea98e5343ca11cd2a89daa9f77e4f46ad44526519","first_computed_at":"2026-07-05T00:24:46.087126Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T00:24:46.087126Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"VynTO50TLxOAfaz/SbZmEIqoLqde8pyz18b4XnzZzMYTQ2HKEZK8UuozC9woHYIpY3vjCVYNQ8C4W8ZT0+ZnBg==","signature_status":"signed_v1","signed_at":"2026-07-05T00:24:46.087596Z","signed_message":"canonical_sha256_bytes"},"source_id":"1912.03485","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b43d5ae7429d19732a7974083d9318bf2db517a3f1020e69c858c32731fe2127","sha256:6c15cd82c29808330e67f07914c3b9a54cde3af7ad896a4aa3496686ea04e646"],"state_sha256":"4bab4188741ddd86181c0b243175b5b2b53c4adb402674401b3627a23be3cf3e"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"PAIBCkeIHguz10C61SPtUijjklxe/XFQNstqr6Gtb139JTFJ1sx5hGHbX4NGhUGXU91CeGj6wnZE5ywXKpFmBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-10T09:00:37.262609Z","bundle_sha256":"0f2101b5c49abcbe82dd928d3a8f6862210de0aa6bbbbf7c2c888ab55dae1097"}}