{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:RY4TZLY5L7JVKU6HVPHZ7VN5UF","short_pith_number":"pith:RY4TZLY5","canonical_record":{"source":{"id":"2305.06085","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-05-10T12:10:02Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"a45b56859fd7e4d8291e7b5435bbeb30c62650cf980685519d5cf061166f00e3","abstract_canon_sha256":"6759deff2fd23eb2351603f77a7d4a4dea28687d06ef439b392a56b4e6550b27"},"schema_version":"1.0"},"canonical_sha256":"8e393caf1d5fd35553c7abcf9fd5bda1775a1c219642b79ff08a7adf2383d7ba","source":{"kind":"arxiv","id":"2305.06085","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2305.06085","created_at":"2026-07-05T06:08:59Z"},{"alias_kind":"arxiv_version","alias_value":"2305.06085v1","created_at":"2026-07-05T06:08:59Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2305.06085","created_at":"2026-07-05T06:08:59Z"},{"alias_kind":"pith_short_12","alias_value":"RY4TZLY5L7JV","created_at":"2026-07-05T06:08:59Z"},{"alias_kind":"pith_short_16","alias_value":"RY4TZLY5L7JVKU6H","created_at":"2026-07-05T06:08:59Z"},{"alias_kind":"pith_short_8","alias_value":"RY4TZLY5","created_at":"2026-07-05T06:08:59Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:RY4TZLY5L7JVKU6HVPHZ7VN5UF","target":"record","payload":{"canonical_record":{"source":{"id":"2305.06085","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-05-10T12:10:02Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"a45b56859fd7e4d8291e7b5435bbeb30c62650cf980685519d5cf061166f00e3","abstract_canon_sha256":"6759deff2fd23eb2351603f77a7d4a4dea28687d06ef439b392a56b4e6550b27"},"schema_version":"1.0"},"canonical_sha256":"8e393caf1d5fd35553c7abcf9fd5bda1775a1c219642b79ff08a7adf2383d7ba","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:08:59.488576Z","signature_b64":"pCD7ga9NgLpcdKJ2F4RI79dHuSOt6NYs4PkEh3RLrOuI5hFTqmZg+elyOe7GihzKqk6a/yQFrto3BYeZ3FifCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"8e393caf1d5fd35553c7abcf9fd5bda1775a1c219642b79ff08a7adf2383d7ba","last_reissued_at":"2026-07-05T06:08:59.488233Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:08:59.488233Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2305.06085","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:08:59Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"A+PKl2eRRFFk6E2XGASleprZcgq0mS4Hwaq/THJxvaUO9B0AeeMsiRm8UuCV4OKTv06i9R1bXEulPyxo45IDAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T13:06:09.131173Z"},"content_sha256":"c4aa0e9483f380876415269b3a65536f708bd9ca81513c44aa5aee8e3c3f7d1b","schema_version":"1.0","event_id":"sha256:c4aa0e9483f380876415269b3a65536f708bd9ca81513c44aa5aee8e3c3f7d1b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:RY4TZLY5L7JVKU6HVPHZ7VN5UF","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"FedSOV: Federated Model Secure Ownership Verification with Unforgeable Signature","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Gongxi Zhu, Hanlin Gu, Lixin Fan, Qiang Yang, Wenyuan Yang, Xiaochun Cao, Yuguo Yin","submitted_at":"2023-05-10T12:10:02Z","abstract_excerpt":"Federated learning allows multiple parties to collaborate in learning a global model without revealing private data. The high cost of training and the significant value of the global model necessitates the need for ownership verification of federated learning. However, the existing ownership verification schemes in federated learning suffer from several limitations, such as inadequate support for a large number of clients and vulnerability to ambiguity attacks. To address these limitations, we propose a cryptographic signature-based federated learning model ownership verification scheme named "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2305.06085","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2305.06085/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:08:59Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"YWfBOmExFCkv1z0BlUTqfvMISUQWzZzxOrh5iyWcgOi9ZhmB/uYG1c2IfJyTiJ3UZtPkdJRoM8+V07UsWSuXCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T13:06:09.131726Z"},"content_sha256":"b8f844616febcf2677ef9b7ed88b6ce64eacd28bcb13b6f36f0f91ac7709f466","schema_version":"1.0","event_id":"sha256:b8f844616febcf2677ef9b7ed88b6ce64eacd28bcb13b6f36f0f91ac7709f466"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/RY4TZLY5L7JVKU6HVPHZ7VN5UF/bundle.json","state_url":"https://pith.science/pith/RY4TZLY5L7JVKU6HVPHZ7VN5UF/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/RY4TZLY5L7JVKU6HVPHZ7VN5UF/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-19T13:06:09Z","links":{"resolver":"https://pith.science/pith/RY4TZLY5L7JVKU6HVPHZ7VN5UF","bundle":"https://pith.science/pith/RY4TZLY5L7JVKU6HVPHZ7VN5UF/bundle.json","state":"https://pith.science/pith/RY4TZLY5L7JVKU6HVPHZ7VN5UF/state.json","well_known_bundle":"https://pith.science/.well-known/pith/RY4TZLY5L7JVKU6HVPHZ7VN5UF/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:RY4TZLY5L7JVKU6HVPHZ7VN5UF","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"6759deff2fd23eb2351603f77a7d4a4dea28687d06ef439b392a56b4e6550b27","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-05-10T12:10:02Z","title_canon_sha256":"a45b56859fd7e4d8291e7b5435bbeb30c62650cf980685519d5cf061166f00e3"},"schema_version":"1.0","source":{"id":"2305.06085","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2305.06085","created_at":"2026-07-05T06:08:59Z"},{"alias_kind":"arxiv_version","alias_value":"2305.06085v1","created_at":"2026-07-05T06:08:59Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2305.06085","created_at":"2026-07-05T06:08:59Z"},{"alias_kind":"pith_short_12","alias_value":"RY4TZLY5L7JV","created_at":"2026-07-05T06:08:59Z"},{"alias_kind":"pith_short_16","alias_value":"RY4TZLY5L7JVKU6H","created_at":"2026-07-05T06:08:59Z"},{"alias_kind":"pith_short_8","alias_value":"RY4TZLY5","created_at":"2026-07-05T06:08:59Z"}],"graph_snapshots":[{"event_id":"sha256:b8f844616febcf2677ef9b7ed88b6ce64eacd28bcb13b6f36f0f91ac7709f466","target":"graph","created_at":"2026-07-05T06:08:59Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2305.06085/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Federated learning allows multiple parties to collaborate in learning a global model without revealing private data. The high cost of training and the significant value of the global model necessitates the need for ownership verification of federated learning. However, the existing ownership verification schemes in federated learning suffer from several limitations, such as inadequate support for a large number of clients and vulnerability to ambiguity attacks. To address these limitations, we propose a cryptographic signature-based federated learning model ownership verification scheme named ","authors_text":"Gongxi Zhu, Hanlin Gu, Lixin Fan, Qiang Yang, Wenyuan Yang, Xiaochun Cao, Yuguo Yin","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-05-10T12:10:02Z","title":"FedSOV: Federated Model Secure Ownership Verification with Unforgeable Signature"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2305.06085","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:c4aa0e9483f380876415269b3a65536f708bd9ca81513c44aa5aee8e3c3f7d1b","target":"record","created_at":"2026-07-05T06:08:59Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"6759deff2fd23eb2351603f77a7d4a4dea28687d06ef439b392a56b4e6550b27","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-05-10T12:10:02Z","title_canon_sha256":"a45b56859fd7e4d8291e7b5435bbeb30c62650cf980685519d5cf061166f00e3"},"schema_version":"1.0","source":{"id":"2305.06085","kind":"arxiv","version":1}},"canonical_sha256":"8e393caf1d5fd35553c7abcf9fd5bda1775a1c219642b79ff08a7adf2383d7ba","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"8e393caf1d5fd35553c7abcf9fd5bda1775a1c219642b79ff08a7adf2383d7ba","first_computed_at":"2026-07-05T06:08:59.488233Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:08:59.488233Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"pCD7ga9NgLpcdKJ2F4RI79dHuSOt6NYs4PkEh3RLrOuI5hFTqmZg+elyOe7GihzKqk6a/yQFrto3BYeZ3FifCg==","signature_status":"signed_v1","signed_at":"2026-07-05T06:08:59.488576Z","signed_message":"canonical_sha256_bytes"},"source_id":"2305.06085","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:c4aa0e9483f380876415269b3a65536f708bd9ca81513c44aa5aee8e3c3f7d1b","sha256:b8f844616febcf2677ef9b7ed88b6ce64eacd28bcb13b6f36f0f91ac7709f466"],"state_sha256":"d34d64636c773fd1a9d1702f17ef3edbbed99e0e02ddb5a7ca969ae84f0950b7"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"qEK55Avj+2twpro3RNjHox/0SP7VmjrKqFfzst/lPpUbzF5serxl+m90YoU1e42+AFdd7xFEljFaxspJx5nWDg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-19T13:06:09.137030Z","bundle_sha256":"9ae641760c3340112559b91f06d4c944b0a923fa29df1d5355d218789d7eaea8"}}