为AI生成内容设计可精准追溯生成时间的可信水印框架
TimeMark: A Trustworthy Time Watermarking Framework for Exact Generation-Time Recovery from AIGC
- 用加密密钥绑定时间信息,实现不可伪造的时间水印
- 每条内容生成独立随机比特序列,无统计规律可被攻击
- 双阶段编码+纠错码,确保生成时间100%准确恢复
大型语言模型在文本生成中的广泛应用引发了日益严重的知识产权争议。水印技术通过在AI生成内容(AIGC)中嵌入元信息,有望作为司法证据。然而现有方法依赖于标记分布的统计信号,导致检测结果具有概率性,尤其在多比特编码(如时间戳)场景下可靠性下降。此外,这些方法会引入可被识别的统计模式,使水印易受伪造攻击,模型提供方可随意编造时间戳。为此,我们提出可信水印概念,实现100%识别准确率,同时抵御用户侧统计攻击与提供商侧伪造行为。本框架聚焦于作为司法证据的时间水印,结合密码学技术,在监管监督下将时间信息编码至时变密钥,防止任意时间篡改。水印载荷与时间解耦,每次生成均产生随机且不存储的比特序列,消除统计特征。为保障可验证性,设计双阶段编码机制,结合纠错码,实现理论上完美的生成时间恢复。理论分析与实验表明,该框架满足司法证据的可靠性要求,为未来AIGC相关知识产权纠纷提供实用解决方案。
原文摘要 · Abstract (English)
The widespread use of Large Language Models (LLMs) in text generation has raised increasing concerns about intellectual property disputes. Watermarking techniques, which embed meta information into AI-generated content (AIGC), have the potential to serve as judicial evidence. However, existing methods rely on statistical signals in token distributions, leading to inherently probabilistic detection and reduced reliability, especially in multi-bit encoding (e.g., timestamps). Moreover, such methods introduce detectable statistical patterns, making them vulnerable to forgery attacks and enabling model providers to fabricate arbitrary watermarks. To address these issues, we propose the concept of trustworthy watermark, which achieves reliable recovery with 100% identification accuracy while resisting both user-side statistical attacks and provider-side forgery. We focus on trustworthy time watermarking for use as judicial evidence. Our framework integrates cryptographic techniques and encodes time information into time-dependent secret keys under regulatory supervision, preventing arbitrary timestamp fabrication. The watermark payload is decoupled from time and generated as a random, non-stored bit sequence for each instance, eliminating statistical patterns. To ensure verifiability, we design a two-stage encoding mechanism, which, combined with error-correcting codes, enables reliable recovery of generation time with theoretically perfect accuracy. Both theoretical analysis and experiments demonstrate that our framework satisfies the reliability requirements for judicial evidence and offers a practical solution for future AIGC-related intellectual property disputes.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。