arXiv:2512.15379cs.ROcs.CR2025-12被引 1

为机器人策略设计可远程检测的水印,保护知识产权。

Remotely Detectable Robot Policy Watermarking

  • 利用策略固有的随机性,在动作中嵌入频谱信号水印。
  • 在模拟和真实机器人上,视频与运动捕捉数据中均实现强鲁棒检测。
  • 适合需非侵入式验证机器人策略来源的研究者与企业。

机器学习在现实机器人系统中的成功催生了一种新型知识产权:训练好的策略。这带来了验证所有权和检测未经授权、可能不安全使用的迫切需求。尽管水印技术已在其他领域成熟,但物理策略面临独特挑战:远程检测。现有方法假设可访问机器人内部状态,但审计者通常仅能获取外部观测(如视频)。这种“物理观测缺口”意味着水印必须从噪声大、异步且经未知系统动态过滤的信号中检测。本文通过“瞥见序列”形式化该挑战,提出首个面向远程检测的水印方案——彩色噪声相干性(CoNoCo)。CoNoCo利用策略的内在随机性,在机器人运动中嵌入频谱信号。为证明其不影响性能,我们证明了CoNoCo保持动作的边缘分布不变。实验表明,该方法在多种远程模态下均表现优异,包括运动捕捉和侧拍/俯拍视频,在模拟与真实机器人实验中均实现强鲁棒性检测。本工作为保护机器人领域的知识产权迈出关键一步,首次提供一种仅通过远程观测即可非侵入式验证物理策略来源的方法。

原文摘要 · Abstract (English)

The success of machine learning for real-world robotic systems has created a new form of intellectual property: the trained policy. This raises a critical need for novel methods that verify ownership and detect unauthorized, possibly unsafe misuse. While watermarking is established in other domains, physical policies present a unique challenge: remote detection. Existing methods assume access to the robot's internal state, but auditors are often limited to external observations (e.g., video footage). This ``Physical Observation Gap'' means the watermark must be detected from signals that are noisy, asynchronous, and filtered by unknown system dynamics. We formalize this challenge using the concept of a \textit{glimpse sequence}, and introduce Colored Noise Coherency (CoNoCo), the first watermarking strategy designed for remote detection. CoNoCo embeds a spectral signal into the robot's motions by leveraging the policy's inherent stochasticity. To show it does not degrade performance, we prove CoNoCo preserves the marginal action distribution. Our experiments demonstrate strong, robust detection across various remote modalities, including motion capture and side-way/top-down video footage, in both simulated and real-world robot experiments. This work provides a necessary step toward protecting intellectual property in robotics, offering the first method for validating the provenance of physical policies non-invasively, using purely remote observations.

机器人水印远程检测知识产权

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。