In this paper, we propose an access control method with a secret key for object detection models for the first time so that unauthorized users without a secret key cannot benefit from the performance of trained models. The method enables us not only to provide a high detection performance to authorized users but to also degrade the performance for unauthorized users. The use of transformed images was proposed for the access control of image classification models, but these images cannot be used for object detection models due to performance degradation. Accordingly, in this paper, selected feature maps are encrypted with a secret key for training and testing models, instead of input images. In an experiment, the protected models allowed authorized users to obtain almost the same performance as that of non-protected models but also with robustness against unauthorized access without a key.
翻译:在本文中,我们首次提议了一种有物体探测模型秘密钥匙的出入控制方法,以便没有秘密钥匙的未经授权的用户无法从经过训练的模型的性能中受益。该方法使我们不仅能够向经授权的用户提供高检测性能,而且能够降低未经授权用户的性能。有人提议使用变换图像用于图像分类模型的出入控制,但由于性能退化,这些图像无法用于物体探测模型。因此,在本文件中,选定的地貌地图被加密为培训和测试模型的秘密钥匙,而不是输入图像。在一次试验中,受保护模型允许经授权的用户获得与无保护模型几乎相同的性能,但也允许用户在无钥匙的情况下对未经授权的进入进行严格控制。