{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:NL5SBIPY473EHXNTCP4FFGLI7B","short_pith_number":"pith:NL5SBIPY","canonical_record":{"source":{"id":"2404.14693","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-04-23T02:50:38Z","cross_cats_sorted":["cs.CV","eess.IV"],"title_canon_sha256":"ba81dbc3a208956f2a1064dd3df24e324bfa56dd2bac7d7402ae7c91d3aaa3c9","abstract_canon_sha256":"11444398beb1743ad88c3cb1e4cc8e025a9372188c5febc8be2f33bab5c4e979"},"schema_version":"1.0"},"canonical_sha256":"6afb20a1f8e7f643ddb313f8529968f84202b5c831c5d4f1fd01d8e4b694c570","source":{"kind":"arxiv","id":"2404.14693","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2404.14693","created_at":"2026-07-05T09:24:34Z"},{"alias_kind":"arxiv_version","alias_value":"2404.14693v2","created_at":"2026-07-05T09:24:34Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2404.14693","created_at":"2026-07-05T09:24:34Z"},{"alias_kind":"pith_short_12","alias_value":"NL5SBIPY473E","created_at":"2026-07-05T09:24:34Z"},{"alias_kind":"pith_short_16","alias_value":"NL5SBIPY473EHXNT","created_at":"2026-07-05T09:24:34Z"},{"alias_kind":"pith_short_8","alias_value":"NL5SBIPY","created_at":"2026-07-05T09:24:34Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:NL5SBIPY473EHXNTCP4FFGLI7B","target":"record","payload":{"canonical_record":{"source":{"id":"2404.14693","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-04-23T02:50:38Z","cross_cats_sorted":["cs.CV","eess.IV"],"title_canon_sha256":"ba81dbc3a208956f2a1064dd3df24e324bfa56dd2bac7d7402ae7c91d3aaa3c9","abstract_canon_sha256":"11444398beb1743ad88c3cb1e4cc8e025a9372188c5febc8be2f33bab5c4e979"},"schema_version":"1.0"},"canonical_sha256":"6afb20a1f8e7f643ddb313f8529968f84202b5c831c5d4f1fd01d8e4b694c570","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:24:34.092957Z","signature_b64":"vLCjtp3qbWXwdAN//O9lRGaOx14Yu6mwwP6Ag7G/O38dnLNnxlkVCQMrZIrAVHVEkIEAYyDeIPB0/8rEHfpsBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"6afb20a1f8e7f643ddb313f8529968f84202b5c831c5d4f1fd01d8e4b694c570","last_reissued_at":"2026-07-05T09:24:34.092437Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:24:34.092437Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2404.14693","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:24:34Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3BWvd4tJNAMlE8Vl5sRy4rVweTr/DtE4YZzZKJM7Ztr2d+zqkouFkSGZ61ZcBqX4m7r+4tTKk/eBtyATDpTnDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T07:56:03.072996Z"},"content_sha256":"a72d88bc51301aaf2362476749424b1df27dece693eb0a929fb816aff0e5aed1","schema_version":"1.0","event_id":"sha256:a72d88bc51301aaf2362476749424b1df27dece693eb0a929fb816aff0e5aed1"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:NL5SBIPY473EHXNTCP4FFGLI7B","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"DIP-Watermark: A Double Identity Protection Method Based on Robust Adversarial Watermark","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CV","eess.IV"],"primary_cat":"cs.CR","authors_text":"Caiyun Xie, Dengpan Ye, Jiacheng Deng, Long Tang, Sipeng Shen, Yunming Zhang, Ziyi Liu","submitted_at":"2024-04-23T02:50:38Z","abstract_excerpt":"The wide deployment of Face Recognition (FR) systems poses privacy risks. One countermeasure is adversarial attack, deceiving unauthorized malicious FR, but it also disrupts regular identity verification of trusted authorizers, exacerbating the potential threat of identity impersonation. To address this, we propose the first double identity protection scheme based on traceable adversarial watermarking, termed DIP-Watermark. DIP-Watermark employs a one-time watermark embedding to deceive unauthorized FR models and allows authorizers to perform identity verification by extracting the watermark. "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2404.14693","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2404.14693/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:24:34Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"DM7yeQe0myQ6vjKYEOwibDMyhP1vNaDxgq87DqGdF3WlXXu1ltbS1dUHWMPYFbBkmzosIHh+varumnOlgPzFBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T07:56:03.073392Z"},"content_sha256":"a785efb43bff56f9436d953126d80c205c2c34565b061fc036da19fe45d6d7f6","schema_version":"1.0","event_id":"sha256:a785efb43bff56f9436d953126d80c205c2c34565b061fc036da19fe45d6d7f6"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/NL5SBIPY473EHXNTCP4FFGLI7B/bundle.json","state_url":"https://pith.science/pith/NL5SBIPY473EHXNTCP4FFGLI7B/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/NL5SBIPY473EHXNTCP4FFGLI7B/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T07:56:03Z","links":{"resolver":"https://pith.science/pith/NL5SBIPY473EHXNTCP4FFGLI7B","bundle":"https://pith.science/pith/NL5SBIPY473EHXNTCP4FFGLI7B/bundle.json","state":"https://pith.science/pith/NL5SBIPY473EHXNTCP4FFGLI7B/state.json","well_known_bundle":"https://pith.science/.well-known/pith/NL5SBIPY473EHXNTCP4FFGLI7B/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:NL5SBIPY473EHXNTCP4FFGLI7B","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"11444398beb1743ad88c3cb1e4cc8e025a9372188c5febc8be2f33bab5c4e979","cross_cats_sorted":["cs.CV","eess.IV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-04-23T02:50:38Z","title_canon_sha256":"ba81dbc3a208956f2a1064dd3df24e324bfa56dd2bac7d7402ae7c91d3aaa3c9"},"schema_version":"1.0","source":{"id":"2404.14693","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2404.14693","created_at":"2026-07-05T09:24:34Z"},{"alias_kind":"arxiv_version","alias_value":"2404.14693v2","created_at":"2026-07-05T09:24:34Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2404.14693","created_at":"2026-07-05T09:24:34Z"},{"alias_kind":"pith_short_12","alias_value":"NL5SBIPY473E","created_at":"2026-07-05T09:24:34Z"},{"alias_kind":"pith_short_16","alias_value":"NL5SBIPY473EHXNT","created_at":"2026-07-05T09:24:34Z"},{"alias_kind":"pith_short_8","alias_value":"NL5SBIPY","created_at":"2026-07-05T09:24:34Z"}],"graph_snapshots":[{"event_id":"sha256:a785efb43bff56f9436d953126d80c205c2c34565b061fc036da19fe45d6d7f6","target":"graph","created_at":"2026-07-05T09:24:34Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2404.14693/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The wide deployment of Face Recognition (FR) systems poses privacy risks. One countermeasure is adversarial attack, deceiving unauthorized malicious FR, but it also disrupts regular identity verification of trusted authorizers, exacerbating the potential threat of identity impersonation. To address this, we propose the first double identity protection scheme based on traceable adversarial watermarking, termed DIP-Watermark. DIP-Watermark employs a one-time watermark embedding to deceive unauthorized FR models and allows authorizers to perform identity verification by extracting the watermark. ","authors_text":"Caiyun Xie, Dengpan Ye, Jiacheng Deng, Long Tang, Sipeng Shen, Yunming Zhang, Ziyi Liu","cross_cats":["cs.CV","eess.IV"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-04-23T02:50:38Z","title":"DIP-Watermark: A Double Identity Protection Method Based on Robust Adversarial Watermark"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2404.14693","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:a72d88bc51301aaf2362476749424b1df27dece693eb0a929fb816aff0e5aed1","target":"record","created_at":"2026-07-05T09:24:34Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"11444398beb1743ad88c3cb1e4cc8e025a9372188c5febc8be2f33bab5c4e979","cross_cats_sorted":["cs.CV","eess.IV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-04-23T02:50:38Z","title_canon_sha256":"ba81dbc3a208956f2a1064dd3df24e324bfa56dd2bac7d7402ae7c91d3aaa3c9"},"schema_version":"1.0","source":{"id":"2404.14693","kind":"arxiv","version":2}},"canonical_sha256":"6afb20a1f8e7f643ddb313f8529968f84202b5c831c5d4f1fd01d8e4b694c570","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"6afb20a1f8e7f643ddb313f8529968f84202b5c831c5d4f1fd01d8e4b694c570","first_computed_at":"2026-07-05T09:24:34.092437Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:24:34.092437Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"vLCjtp3qbWXwdAN//O9lRGaOx14Yu6mwwP6Ag7G/O38dnLNnxlkVCQMrZIrAVHVEkIEAYyDeIPB0/8rEHfpsBw==","signature_status":"signed_v1","signed_at":"2026-07-05T09:24:34.092957Z","signed_message":"canonical_sha256_bytes"},"source_id":"2404.14693","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:a72d88bc51301aaf2362476749424b1df27dece693eb0a929fb816aff0e5aed1","sha256:a785efb43bff56f9436d953126d80c205c2c34565b061fc036da19fe45d6d7f6"],"state_sha256":"32258f06621af1a85e95e013f1e120eccaf0afa4dcf839bb09c892e879b3f99d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ta232+VykbFYjnkoWHGMq7b/un2XJj4JH3TxRTc79byjff3rW5qohCfdhE6hLg13NWWUx51Ev7S/oefaH8psDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T07:56:03.075534Z","bundle_sha256":"358957fd0e6ca96203857690c7563779e7eba2a53ed21ff9e4256e6a30f22ae1"}}