{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2024:NL5SBIPY473EHXNTCP4FFGLI7B","short_pith_number":"pith:NL5SBIPY","schema_version":"1.0","canonical_sha256":"6afb20a1f8e7f643ddb313f8529968f84202b5c831c5d4f1fd01d8e4b694c570","source":{"kind":"arxiv","id":"2404.14693","version":2},"attestation_state":"computed","paper":{"title":"DIP-Watermark: A Double Identity Protection Method Based on Robust Adversarial Watermark","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CV","eess.IV"],"primary_cat":"cs.CR","authors_text":"Caiyun Xie, Dengpan Ye, Jiacheng Deng, Long Tang, Sipeng Shen, Yunming Zhang, Ziyi Liu","submitted_at":"2024-04-23T02:50:38Z","abstract_excerpt":"The wide deployment of Face Recognition (FR) systems poses privacy risks. One countermeasure is adversarial attack, deceiving unauthorized malicious FR, but it also disrupts regular identity verification of trusted authorizers, exacerbating the potential threat of identity impersonation. To address this, we propose the first double identity protection scheme based on traceable adversarial watermarking, termed DIP-Watermark. DIP-Watermark employs a one-time watermark embedding to deceive unauthorized FR models and allows authorizers to perform identity verification by extracting the watermark. "},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2404.14693","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-04-23T02:50:38Z","cross_cats_sorted":["cs.CV","eess.IV"],"title_canon_sha256":"ba81dbc3a208956f2a1064dd3df24e324bfa56dd2bac7d7402ae7c91d3aaa3c9","abstract_canon_sha256":"11444398beb1743ad88c3cb1e4cc8e025a9372188c5febc8be2f33bab5c4e979"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:24:34.092957Z","signature_b64":"vLCjtp3qbWXwdAN//O9lRGaOx14Yu6mwwP6Ag7G/O38dnLNnxlkVCQMrZIrAVHVEkIEAYyDeIPB0/8rEHfpsBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"6afb20a1f8e7f643ddb313f8529968f84202b5c831c5d4f1fd01d8e4b694c570","last_reissued_at":"2026-07-05T09:24:34.092437Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:24:34.092437Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"DIP-Watermark: A Double Identity Protection Method Based on Robust Adversarial Watermark","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CV","eess.IV"],"primary_cat":"cs.CR","authors_text":"Caiyun Xie, Dengpan Ye, Jiacheng Deng, Long Tang, Sipeng Shen, Yunming Zhang, Ziyi Liu","submitted_at":"2024-04-23T02:50:38Z","abstract_excerpt":"The wide deployment of Face Recognition (FR) systems poses privacy risks. One countermeasure is adversarial attack, deceiving unauthorized malicious FR, but it also disrupts regular identity verification of trusted authorizers, exacerbating the potential threat of identity impersonation. To address this, we propose the first double identity protection scheme based on traceable adversarial watermarking, termed DIP-Watermark. DIP-Watermark employs a one-time watermark embedding to deceive unauthorized FR models and allows authorizers to perform identity verification by extracting the watermark. "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2404.14693","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2404.14693/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2404.14693","created_at":"2026-07-05T09:24:34.092502+00:00"},{"alias_kind":"arxiv_version","alias_value":"2404.14693v2","created_at":"2026-07-05T09:24:34.092502+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2404.14693","created_at":"2026-07-05T09:24:34.092502+00:00"},{"alias_kind":"pith_short_12","alias_value":"NL5SBIPY473E","created_at":"2026-07-05T09:24:34.092502+00:00"},{"alias_kind":"pith_short_16","alias_value":"NL5SBIPY473EHXNT","created_at":"2026-07-05T09:24:34.092502+00:00"},{"alias_kind":"pith_short_8","alias_value":"NL5SBIPY","created_at":"2026-07-05T09:24:34.092502+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":1,"internal_anchor_count":0,"sample":[{"citing_arxiv_id":"2605.19032","citing_title":"Personalized Face Privacy Protection From a Single Image","ref_index":56,"is_internal_anchor":false}]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/NL5SBIPY473EHXNTCP4FFGLI7B","json":"https://pith.science/pith/NL5SBIPY473EHXNTCP4FFGLI7B.json","graph_json":"https://pith.science/api/pith-number/NL5SBIPY473EHXNTCP4FFGLI7B/graph.json","events_json":"https://pith.science/api/pith-number/NL5SBIPY473EHXNTCP4FFGLI7B/events.json","paper":"https://pith.science/paper/NL5SBIPY"},"agent_actions":{"view_html":"https://pith.science/pith/NL5SBIPY473EHXNTCP4FFGLI7B","download_json":"https://pith.science/pith/NL5SBIPY473EHXNTCP4FFGLI7B.json","view_paper":"https://pith.science/paper/NL5SBIPY","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2404.14693&json=true","fetch_graph":"https://pith.science/api/pith-number/NL5SBIPY473EHXNTCP4FFGLI7B/graph.json","fetch_events":"https://pith.science/api/pith-number/NL5SBIPY473EHXNTCP4FFGLI7B/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/NL5SBIPY473EHXNTCP4FFGLI7B/action/timestamp_anchor","attest_storage":"https://pith.science/pith/NL5SBIPY473EHXNTCP4FFGLI7B/action/storage_attestation","attest_author":"https://pith.science/pith/NL5SBIPY473EHXNTCP4FFGLI7B/action/author_attestation","sign_citation":"https://pith.science/pith/NL5SBIPY473EHXNTCP4FFGLI7B/action/citation_signature","submit_replication":"https://pith.science/pith/NL5SBIPY473EHXNTCP4FFGLI7B/action/replication_record"}},"created_at":"2026-07-05T09:24:34.092502+00:00","updated_at":"2026-07-05T09:24:34.092502+00:00"}