US 11,704,390 B2
Method and system for signing an artificial intelligence watermark using a query
Yong Liu, Sunnyvale, CA (US); and Yueqiang Cheng, Sunnyvale, CA (US)
Assigned to BAIDU USA LLC, Sunnyvale, CA (US); and KUNLUNXIN TECHNOLOGY (BEIJING) COMPANY LIMITED, Beijing (CN)
Filed by Baidu USA LLC, Sunnyvale, CA (US)
Filed on Oct. 10, 2019, as Appl. No. 16/598,415.
Prior Publication US 2021/0110010 A1, Apr. 15, 2021
Int. Cl. G06F 21/16 (2013.01); G06N 20/00 (2019.01); H04L 9/40 (2022.01); G06F 16/903 (2019.01); H04L 9/32 (2006.01); G06N 5/04 (2023.01)
CPC G06F 21/16 (2013.01) [G06F 16/90335 (2019.01); G06N 5/04 (2013.01); G06N 20/00 (2019.01); H04L 9/3247 (2013.01); H04L 63/0428 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A computer-implemented method of a data processing (DP) accelerator, the method comprising:
receiving, by the DP accelerator comprising one of a math co-processor and a DSP, input data from a host device over a secure link of a peripheral component interconnect express (PCIe) communication channel;
executing, by the DP accelerator, a watermark-enabled artificial intelligence (AI) model based on the input data,
receiving, by the DP accelerator, a watermark-enabled kernel over the secure link;
executing, by the DP accelerator, the received watermark-enabled kernel to extract the watermark from the watermark-enabled AI model;
executing, by the DP accelerator, the watermark-enabled kernel to sign the extracted watermark;
transmitting the signed watermark of the watermark-enabled AI model to the host device over the secure link;
whereby the execution of the DP accelerator of the watermark-enabled kernel is faster than a corresponding execution performed by the host;
and whereby the host is configured to verify the signed watermark to determine that the watermark-enabled artificial intelligence (AI) model is authentic because the watermark-enabled kernel is trusted.