{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:MWEPCMR76L34WVKKO3FUP5VHLM","short_pith_number":"pith:MWEPCMR7","canonical_record":{"source":{"id":"2008.05966","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2020-08-13T15:22:49Z","cross_cats_sorted":["cs.CR","stat.ML"],"title_canon_sha256":"335a9446a32150cdf9e22a32a9a09166ea6ae06811bd8166140adea0df4774cf","abstract_canon_sha256":"1f170bd1b00c970a544f0d5057b04993535a909052a3761363ba98158c5c47fa"},"schema_version":"1.0"},"canonical_sha256":"6588f1323ff2f7cb554a76cb47f6a75b080705da8e60590978199359b817ca99","source":{"kind":"arxiv","id":"2008.05966","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2008.05966","created_at":"2026-07-05T07:46:09Z"},{"alias_kind":"arxiv_version","alias_value":"2008.05966v2","created_at":"2026-07-05T07:46:09Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2008.05966","created_at":"2026-07-05T07:46:09Z"},{"alias_kind":"pith_short_12","alias_value":"MWEPCMR76L34","created_at":"2026-07-05T07:46:09Z"},{"alias_kind":"pith_short_16","alias_value":"MWEPCMR76L34WVKK","created_at":"2026-07-05T07:46:09Z"},{"alias_kind":"pith_short_8","alias_value":"MWEPCMR7","created_at":"2026-07-05T07:46:09Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:MWEPCMR76L34WVKKO3FUP5VHLM","target":"record","payload":{"canonical_record":{"source":{"id":"2008.05966","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2020-08-13T15:22:49Z","cross_cats_sorted":["cs.CR","stat.ML"],"title_canon_sha256":"335a9446a32150cdf9e22a32a9a09166ea6ae06811bd8166140adea0df4774cf","abstract_canon_sha256":"1f170bd1b00c970a544f0d5057b04993535a909052a3761363ba98158c5c47fa"},"schema_version":"1.0"},"canonical_sha256":"6588f1323ff2f7cb554a76cb47f6a75b080705da8e60590978199359b817ca99","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:46:09.428693Z","signature_b64":"zL9W4Ttooz9U1VplH204TvpuMyj1uYzUIoGUnTIAvxlc/csXgzIBSLb8l4Fn7uUY4IdvASV6XP4A1Jw7YP4kAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"6588f1323ff2f7cb554a76cb47f6a75b080705da8e60590978199359b817ca99","last_reissued_at":"2026-07-05T07:46:09.428071Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:46:09.428071Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2008.05966","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:46:09Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"DLXur2A2UUSdDSA7FgyBPtkOV7eXVy+3aotlH9qn4rWNawuLWNw00kELQCVeEfvV7+VqQeVmO2Lgavr75YLrBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-01T00:38:12.698654Z"},"content_sha256":"b4bdafd50074b56d2ea4dcb05b6e63b337a2b772f5bad4d2b1bd6e3d06760947","schema_version":"1.0","event_id":"sha256:b4bdafd50074b56d2ea4dcb05b6e63b337a2b772f5bad4d2b1bd6e3d06760947"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:MWEPCMR76L34WVKKO3FUP5VHLM","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Deep-Lock: Secure Authorization for Deep Neural Networks","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR","stat.ML"],"primary_cat":"cs.LG","authors_text":"Debdeep Mukhopadhyay, Manaar Alam, Sandip Kundu, Sayandeep Saha","submitted_at":"2020-08-13T15:22:49Z","abstract_excerpt":"Trained Deep Neural Network (DNN) models are considered valuable Intellectual Properties (IP) in several business models. Prevention of IP theft and unauthorized usage of such DNN models has been raised as of significant concern by industry. In this paper, we address the problem of preventing unauthorized usage of DNN models by proposing a generic and lightweight key-based model-locking scheme, which ensures that a locked model functions correctly only upon applying the correct secret key. The proposed scheme, known as Deep-Lock, utilizes S-Boxes with good security properties to encrypt each p"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2008.05966","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2008.05966/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:46:09Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"+Dwadi9cSLwM1ZLJqXXa09xwyBbR0x92B1OJzTK/q/KcxeowIlf9fV6np+3f6djdVFDphuRYzqDE/KLmGaDyDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-01T00:38:12.699148Z"},"content_sha256":"ae077341b80c57c9881cfb054489bb341922db6e5337a291ec43a1f70d1d87a6","schema_version":"1.0","event_id":"sha256:ae077341b80c57c9881cfb054489bb341922db6e5337a291ec43a1f70d1d87a6"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/MWEPCMR76L34WVKKO3FUP5VHLM/bundle.json","state_url":"https://pith.science/pith/MWEPCMR76L34WVKKO3FUP5VHLM/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/MWEPCMR76L34WVKKO3FUP5VHLM/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-01T00:38:12Z","links":{"resolver":"https://pith.science/pith/MWEPCMR76L34WVKKO3FUP5VHLM","bundle":"https://pith.science/pith/MWEPCMR76L34WVKKO3FUP5VHLM/bundle.json","state":"https://pith.science/pith/MWEPCMR76L34WVKKO3FUP5VHLM/state.json","well_known_bundle":"https://pith.science/.well-known/pith/MWEPCMR76L34WVKKO3FUP5VHLM/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:MWEPCMR76L34WVKKO3FUP5VHLM","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"1f170bd1b00c970a544f0d5057b04993535a909052a3761363ba98158c5c47fa","cross_cats_sorted":["cs.CR","stat.ML"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2020-08-13T15:22:49Z","title_canon_sha256":"335a9446a32150cdf9e22a32a9a09166ea6ae06811bd8166140adea0df4774cf"},"schema_version":"1.0","source":{"id":"2008.05966","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2008.05966","created_at":"2026-07-05T07:46:09Z"},{"alias_kind":"arxiv_version","alias_value":"2008.05966v2","created_at":"2026-07-05T07:46:09Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2008.05966","created_at":"2026-07-05T07:46:09Z"},{"alias_kind":"pith_short_12","alias_value":"MWEPCMR76L34","created_at":"2026-07-05T07:46:09Z"},{"alias_kind":"pith_short_16","alias_value":"MWEPCMR76L34WVKK","created_at":"2026-07-05T07:46:09Z"},{"alias_kind":"pith_short_8","alias_value":"MWEPCMR7","created_at":"2026-07-05T07:46:09Z"}],"graph_snapshots":[{"event_id":"sha256:ae077341b80c57c9881cfb054489bb341922db6e5337a291ec43a1f70d1d87a6","target":"graph","created_at":"2026-07-05T07:46:09Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2008.05966/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Trained Deep Neural Network (DNN) models are considered valuable Intellectual Properties (IP) in several business models. Prevention of IP theft and unauthorized usage of such DNN models has been raised as of significant concern by industry. In this paper, we address the problem of preventing unauthorized usage of DNN models by proposing a generic and lightweight key-based model-locking scheme, which ensures that a locked model functions correctly only upon applying the correct secret key. The proposed scheme, known as Deep-Lock, utilizes S-Boxes with good security properties to encrypt each p","authors_text":"Debdeep Mukhopadhyay, Manaar Alam, Sandip Kundu, Sayandeep Saha","cross_cats":["cs.CR","stat.ML"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2020-08-13T15:22:49Z","title":"Deep-Lock: Secure Authorization for Deep Neural Networks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2008.05966","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b4bdafd50074b56d2ea4dcb05b6e63b337a2b772f5bad4d2b1bd6e3d06760947","target":"record","created_at":"2026-07-05T07:46:09Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"1f170bd1b00c970a544f0d5057b04993535a909052a3761363ba98158c5c47fa","cross_cats_sorted":["cs.CR","stat.ML"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2020-08-13T15:22:49Z","title_canon_sha256":"335a9446a32150cdf9e22a32a9a09166ea6ae06811bd8166140adea0df4774cf"},"schema_version":"1.0","source":{"id":"2008.05966","kind":"arxiv","version":2}},"canonical_sha256":"6588f1323ff2f7cb554a76cb47f6a75b080705da8e60590978199359b817ca99","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"6588f1323ff2f7cb554a76cb47f6a75b080705da8e60590978199359b817ca99","first_computed_at":"2026-07-05T07:46:09.428071Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:46:09.428071Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"zL9W4Ttooz9U1VplH204TvpuMyj1uYzUIoGUnTIAvxlc/csXgzIBSLb8l4Fn7uUY4IdvASV6XP4A1Jw7YP4kAw==","signature_status":"signed_v1","signed_at":"2026-07-05T07:46:09.428693Z","signed_message":"canonical_sha256_bytes"},"source_id":"2008.05966","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b4bdafd50074b56d2ea4dcb05b6e63b337a2b772f5bad4d2b1bd6e3d06760947","sha256:ae077341b80c57c9881cfb054489bb341922db6e5337a291ec43a1f70d1d87a6"],"state_sha256":"ce116220a43a776dc30cf44cea6ef06de390fce22306cdd1070af9b3c9e7828d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"1j7Q7+5Fw1wDP6UViQ1kTTXUwGJ0d8/vDcg7b+d75wlZShl4ganp2KAMrUxSCf2WcqfRvOSWi18oR4y2k0GxDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-01T00:38:12.704479Z","bundle_sha256":"722d75777f941e3cf7740f37d239edb10b510f94a1907ece6600b904a4b53105"}}