Access Control of Semantic Segmentation Models Using Encrypted Feature Maps
Not on the map. Why?
Abstract (arXiv)
In this paper, we propose an access control method with a secret key for semantic segmentation models for the first time so that unauthorized users without a secret key cannot benefit from the performance of trained models. The method enables us not only to provide a high segmentation performance to authorized users but to also degrade the performance for unauthorized users. We first point out that, for the application of semantic segmentation, conventional access control methods which use encrypted images for classification tasks are not directly applicable due to performance degradation. Accordingly, in this paper, selected feature maps are encrypted with a secret key for training and testing models, instead of input images. In an experiment, the protected models allowed authorized users to obtain almost the same performance as that of non-protected models but also with robustness against unauthorized access without a key.
Key facts. Cited by 3 papers in the map (data through 14 Oct 2026). Builds on 22 of its 35 references that are in the map. First posted on arXiv 11 Jun 2022.
Builds on
22 of 35 references.
References · 22
- 2015Deep Residual Learning for Image Recognitioncited by 52,096
- 2019PyTorch: An Imperative Style, High-Performance Deep Learning Librarycited by 20,305
- 2014ImageNet Large Scale Visual Recognition Challengecited by 8,498
- 2014Explaining and Harnessing Adversarial Examplescited by 7,364
- 2013Intriguing properties of neural networkscited by 5,155
- 2014Fully Convolutional Networks for Semantic Segmentationcited by 4,859
- 2017Rethinking Atrous Convolution for Semantic Image Segmentationcited by 2,161
- 2016Practical Black-Box Attacks against Machine Learningcited by 903
- 2018Turning Your Weakness Into a Strength: Watermarking Deep Neural Networks by Backdooringcited by 357
- 2017Embedding Watermarks into Deep Neural Networkscited by 248
- 2017Adversarial Frontier Stitching for Remote Neural Network Watermarkingcited by 118
- 2019[Extended version] Rethinking Deep Neural Network Ownership Verification: Embedding Passports to Defeat Ambiguity Attackscited by 88
10 more
- 2018Recent progress in semantic image segmentationcited by 39
- 2018Encryption-then-Compression Systems using Grayscale-based Image Encryption for JPEG Imagescited by 34
- 2018Learnable Image Encryptioncited by 33
- 2020Block-wise Image Transformation with Secret Key for Adversarially Robust Defensecited by 30
- 2022An Overview of Compressible and Learnable Image Transformation with Secret Key and Its Applicationscited by 29
- 2020Block-wise Scrambled Image Recognition Using Adaptation Networkcited by 27
- 2020A GAN-Based Image Transformation Scheme for Privacy-Preserving Deep Neural Networkscited by 27
- 2019Privacy-Preserving Deep Neural Networks with Pixel-based Image Encryption Considering Data Augmentation in the Encrypted Domaincited by 19
- 2021A Protection Method of Trained CNN Model with Secret Key from Unauthorized Accesscited by 15
- 2021Piracy-Resistant DNN Watermarking by Block-Wise Image Transformation with Secret Keycited by 10
Built on by
Citing papers per year: 2022: 1; 2023: 1; 2024: 0; 2025: 1.
3 papers.
- 2023Generative Model-Based Attack on Learnable Image Encryption for Privacy-Preserving Deep Learningcited by 4
- 2022An Access Control Method with Secret Key for Semantic Segmentation Modelscited by 0
- 2025SAGE: Style-Adaptive Generalization for Privacy-Constrained Semantic Segmentation Across Domainscited by 0
- 2025SAGE: Style-Adaptive Generalization for Privacy-Constrained Semantic Segmentation Across Domains2 Dec 2025
- 2023Generative Model-Based Attack on Learnable Image Encryption for Privacy-Preserving Deep Learning9 Mar 2023
- 2022An Access Control Method with Secret Key for Semantic Segmentation Models28 Aug 2022