Method and system for signing output using a kernel

A data processing (DP) accelerator, comprising:

• an interface to receive a signature kernel specifying an input to the signature kernel from a host device, wherein the input specified by the signature kernel comprises an artificial intelligence (AI) model having a watermark;
• and
• artificial intelligence (AI) circuitry to execute the signature kernel to:
• extract the watermark from the input and obtain a hash of the watermark,
• generate an output based on the input,
• embed the hash of the watermark into the output,
• digitally sign the output, and
• transmit the output to the host device, wherein the output enables the host device to perform validation testing on the AI model.

A non-transitory machine-readable medium having instructions stored therein, which when executed by a processor, cause the processor to perform operations of a data processing (DP) accelerator, the operations comprising:

• receiving, at a DP accelerator from a host device, a signature kernel specifying an input to the signature kernel, wherein the input specified by the signature kernel comprises an artificial intelligence (AI) model having a watermark;
• executing the signature kernel received by the DP accelerator to:
• extract the watermark from the input and obtain a hash of the watermark,
• generate an output based on the input,
• embed the hash of the watermark into the output, and
• digitally sign the output;
• and
• transmitting the output to the host device, wherein the output enables the host device to perform validation testing on the AI model.

A host device, comprising:

• a processor;
• and
• a memory coupled to the processor to store instructions that, when executed by the processor, cause the processor to perform operations of digitally signing input by a data processing (DP) accelerator and embedding the digitally signed input into an output, the operations comprising:
• transmitting, to the DP accelerator, a signature kernel specifying input to the signature kernel to cause the DP accelerator to execute the signature kernel to extract a watermark from the input, wherein the input specified by the signature kernel comprises an artificial intelligence (AI) model having the watermark, and
• receiving, from the DP accelerator, a digitally signed output of the signature kernel that is based upon the input to the signature kernel, wherein a hash of the watermark extracted from the input is embedded into the output, and wherein the output enables the host device to perform validation testing on the AI model.