Trained Deep Neural Network (DNN) models are considered valuable Intellectual
Properties (IP) in several business models. Prevention of IP theft and
unauthorized usage of such DNN models has been raised as of significant concern
by industry. In this paper, we address the problem of preventing unauthorized
usage of DNN models by proposing a generic and lightweight key-based
model-locking scheme, which ensures that a locked model functions correctly
only upon applying the correct secret key. The proposed scheme, known as
Deep-Lock, utilizes S-Boxes with good security properties to encrypt each
parameter of a trained DNN model with secret keys generated from a master key
via a key scheduling algorithm. The resulting dense network of encrypted
weights is found robust against model fine-tuning attacks. Finally, Deep-Lock
does not require any intervention in the structure and training of the DNN
models, making it applicable for all existing software and hardware
implementations of DNN.

本文提出了一种利用 S - 盒进行加密的轻量级密钥锁定方案 Deep-Lock，该方案可防止深度神经网络（DNN）模型的未授权使用和知识产权盗窃，并且不需要对 DNN 模型的结构和训练进行调整，具有较强的保密性和抗篡改能力。