arXiv:2411.03887cs.AIcs.CR2024-11被引 1

让模型开源可用,同时确保开发者能控制使用并获利。

OML: A Primitive for Reconciling Open Access with Owner Control in AI Model Distribution

  • 用AI指纹+加密经济机制实现模型自由分发但权限可控
  • 首次提出白盒模型保护的严格安全定义,包括防提取和防伪造
  • 适合关注模型版权、可持续AI生态的研究者与开发者

当前AI模型分发面临根本矛盾:封闭模型牺牲透明性与本地运行,开放模型则损失收益与控制权。本文提出OML(Open-access, Monetizable, and Loyal AI Model Serving),一种新范式,使模型可自由分发用于本地执行,同时通过密码学手段强制使用授权。我们首次形式化该问题,提出针对白盒模型保护的独特安全定义:模型提取抵抗与权限伪造抵抗。证明了OML属性的理论可达边界,全面刻画了从混淆到密码学方案的设计空间。为验证可行性,提出OML 1.0,结合AI原生模型指纹与加密经济激励机制。通过理论分析与实证评估,确立OML作为可持续AI生态的基础性原语。本工作开辟了密码学、机器学习与机制设计交叉的新研究方向,对AI分发与治理具有深远影响。

原文摘要 · Abstract (English)

The current paradigm of AI model distribution presents a fundamental dichotomy: models are either closed and API-gated, sacrificing transparency and local execution, or openly distributed, sacrificing monetization and control. We introduce OML(Open-access, Monetizable, and Loyal AI Model Serving), a primitive that enables a new distribution paradigm where models can be freely distributed for local execution while maintaining cryptographically enforced usage authorization. We are the first to introduce and formalize this problem, introducing rigorous security definitions tailored to the unique challenge of white-box model protection: model extraction resistance and permission forgery resistance. We prove fundamental bounds on the achievability of OML properties and characterize the complete design space of potential constructions, from obfuscation-based approaches to cryptographic solutions. To demonstrate practical feasibility, we present OML 1.0, a novel OML construction leveraging AI-native model fingerprinting coupled with crypto-economic enforcement mechanisms. Through extensive theoretical analysis and empirical evaluation, we establish OML as a foundational primitive necessary for sustainable AI ecosystems. This work opens a new research direction at the intersection of cryptography, machine learning, and mechanism design, with critical implications for the future of AI distribution and governance.

模型分发加密经济白盒保护

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。