A novel method for access control with a secret key is proposed to protect models from unauthorized access in this paper. We focus on semantic segmentation models with the vision transformer (ViT), called segmentation transformer (SETR). Most existing access control methods focus on image classification tasks, or they are limited to CNNs. By using a patch embedding structure that ViT has, trained models and test images can be efficiently encrypted with a secret key, and then semantic segmentation tasks are carried out in the encrypted domain. In an experiment, the method is confirmed to provide the same accuracy as that of using plain images without any encryption to authorized users with a correct key and also to provide an extremely degraded accuracy to unauthorized users.
翻译:使用秘密密钥进行入口控制的新方法,以保护模型不受本文件中未经授权访问的干扰。 我们侧重于视觉变压器(VIT)的语义分解模型(SETR ) 。 大多数现有的访问控制方法都侧重于图像分类任务,或者仅限于CNN。 通过使用VIT的补丁嵌入结构,经过培训的模型和测试图像可以有效地用秘密密钥加密,然后在加密域进行语义分解任务。 在一项实验中,我们确认该方法可以提供与对拥有正确密钥的授权用户使用不加密的普通图像一样的准确性,并为未经授权的用户提供极低的准确性。