Anti-piracy framework for deep neural networks

An apparatus, comprising:

• at least one processor;
• and
• at least one memory comprising computer program code,
• the at least one memory and the computer program code are configured, with the at least one processor to cause the apparatus at least to
• receive authorized raw input at a protective transform module;
• receive unauthorized raw input at a restrictive deep neural network;
• process the authorized raw input at the protective transform module to generate a processed input;
• feed the processed input into the restrictive deep neural network;
• and
• generate a result based on the processed input and the unauthorized raw input,
• wherein the result comprises a different learning performance between the authorized raw input and the unauthorized raw input,
• wherein processing the authorized raw input comprises applying a perturbation on the authorized raw input, and
• wherein the perturbation comprises a predetermined universal perturbation matrix for all inputs, a universal perturbation matrix for all inputs, or a specific perturbation matrix for each input.

A computer program, embodied on a non-transitory computer readable medium, the computer program, when executed by a processor, causes the processor to:

• receive authorized raw input at a protective transform module;
• receive unauthorized raw input at a restrictive deep neural network;
• process the authorized raw input at the protective transform module to generate a processed input;
• feed the processed input into the restrictive deep neural network;
• and
• generate a result based on the processed input and the unauthorized raw input,
• wherein the result comprises a different learning performance between the authorized raw input and the unauthorized raw input,
• wherein processing the authorized raw input comprises applying a perturbation on the authorized raw input, and
• wherein the perturbation comprises a predetermined universal perturbation matrix for all inputs, a universal perturbation matrix for all inputs, or a specific perturbation matrix for each input.