Method and system for signing an artificial intelligence watermark using a kernel

A data processing (DP) accelerator, comprising:

• a memory coupled to an interface to receive from a host device an artificial intelligence (AI) model,
• a watermark-enabled kernel, and first input data,
• wherein the watermark-enabled kernel comprises executable code to extract a watermark from the AI model;
• and
• an AI unit coupled to the interface to execute on a hardware processor within the DP accelerator the watermark-enabled kernel based on the first input data to extract the watermark from the AI model,
• digitally sign the watermark using a signature key, and
• transmit the watermark to the host device.

A non-transitory machine-readable medium having instructions stored therein, which when executed by a processor, cause the processor to perform operations of a data processing (DP) accelerator, the operations comprising:

• receiving, by the DP accelerator, from a host device, an artificial intelligence (AI) model, a watermark-enabled kernel, and first input data, wherein the watermark-enabled kernel comprises executable code to extract a watermark from the AI model;
• executing, within the DP accelerator, the watermark-enabled kernel based on the first input data to extract the watermark from the AI model;
• digitally signing the watermark using a signature key;
• and
• transmitting the watermark to the host device.

A host device, comprising:

• a processor;
• and
• a memory coupled to the processor to store instructions, which when executed by the processor, cause the processor to perform operations, the operations comprising:
• transmitting, by the host device, to a data processing (DP) accelerator, an artificial intelligence (AI) model and a watermark-enabled kernel,
• wherein the watermark-enabled kernel comprises executable code to extract a watermark from the AI model,
• transmitting, by the host device, first input data to the DP accelerator as input to the watermark-enabled kernel, and
• receiving the watermark extracted from the AI model from the DP accelerator, wherein the DP accelerator is configured to execute the watermark-enabled kernel based on the first input data to extract the watermark from the AI model and to digitally sign the watermark using a signature key.