Patent ID: 11972408
Assignee: THE REGENTS OF THE UNIVERSITY OF CALIFORNIA
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 18:
19. A non-transitory computer readable medium storing instructions, which when executed by at least one data processor, result in operations comprising:
identifying, based at least on a first activation map associated with a first hidden layer of a first machine learning model, a first plurality of input samples altering one or more low probabilistic regions of the first activation map, the first hidden layer including a plurality of neurons, each of the plurality of neurons applying an activation function to generate an output, and the one or more low probabilistic regions of the first activation map being occupied by values having below a threshold probability of being output by the plurality of neurons;
embedding, in the first hidden layer of the first machine learning model, a first digital watermark corresponding to the first plurality of input samples, the embedding of the first digital watermark includes training, based at least on training data including the first plurality of input samples, the first machine learning model;
identifying a second plurality of input samples originating from the one or more low probabilistic regions of the first machine learning model;
embedding, in an output layer of the first machine learning model, a second digital watermark by at least fine-tuning, based at least on the second plurality of input samples, the first machine learning model; and
determining that a second machine learning model is a duplicate of the first machine learning model based at least on a comparison of the first digital watermark embedded in the first machine learning model and a digital watermark extracted from the second machine learning model.