CredID: Credible Multi-Bit Watermark for Large Language Models Identification
On the map: LLM safety and security → Watermarking generated content and models
Abstract (arXiv)
Large Language Models (LLMs) are widely used in complex natural language processing tasks but raise privacy and security concerns due to the lack of identity recognition. This paper proposes a multi-party credible watermarking framework (CredID) involving a trusted third party (TTP) and multiple LLM vendors to address these issues. In the watermark embedding stage, vendors request a seed from the TTP to generate watermarked text without sending the user's prompt. In the extraction stage, the TTP coordinates each vendor to extract and verify the watermark from the text. This provides a credible watermarking scheme while preserving vendor privacy. Furthermore, current watermarking algorithms struggle with text quality, information capacity, and robustness, making it challenging to meet the diverse identification needs of LLMs. Thus, we propose a novel multi-bit watermarking algorithm and an open-source toolkit to facilitate research. Experiments show our CredID enhances watermark credibility and efficiency without compromising text quality. Additionally, we successfully utilized this framework to achieve highly accurate identification among multiple LLM vendors.
Key facts. Cited by 4 papers in the map (data through 14 Oct 2026). Placed in Watermarking generated content and models, one of 12 directions in LLM safety and security. Builds on 31 of its 43 references that are in the map. First posted on arXiv 4 Dec 2024.
Builds on
31 of 43 references.
Closest ancestors · 16
Same direction, newest first
- 2024MarkLLM: An Open-Source Toolkit for LLM Watermarking16 May
- 2023A Survey of Text Watermarking in the Era of Large Language Models13 Dec
- 2023A Semantic Invariant Robust Watermark for Large Language Models10 Oct
- 2023Advancing Beyond Identification: Multi-bit Watermark for Large Language Models1 Aug
- 2023Towards Codable Watermarking for Injecting Multi-bits Information to LLMs29 Jul
- 2023Robust Distortion-free Watermarks for Language Models28 Jul
- 2023Provable Robust Watermarking for AI-Generated Text30 Jun
- 2023On the Reliability of Watermarks for Large Language Models7 Jun
- 2023Who Wrote this Code? Watermarking for Code Generation24 May
- 2023Watermarking Text Generated by Black-Box Language Models14 May
- 2023DeepTextMark: A Deep Learning-Driven Text Watermarking Approach for Identifying Large Language Model Generated Text9 May
- 2023Robust Multi-bit Natural Language Watermarking through Invariant Features3 May
4 more
- 2023Paraphrasing evades detectors of AI-generated text, but retrieval is an effective defense23 Mar
- 2023A Watermark for Large Language Models24 Jan
- 2022CATER: Intellectual Property Protection on Text Generation APIs via Conditional Watermarks19 Sep
- 2021Protecting Intellectual Property of Language Generation APIs with Lexical Watermark5 Dec
Other references · 15
- 2024The Llama 3 Herd of Modelscited by 14,715
- 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,599
- 2019RoBERTa: A Robustly Optimized BERT Pretraining Approachcited by 13,372
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
- 2021Training Verifiers to Solve Math Word Problemscited by 10,109
- 2020Measuring Massive Multitask Language Understandingcited by 7,963
- 2018Think you have Solved Question Answering? Try ARC, the AI2 Reasoning Challengecited by 4,886
- 2019HellaSwag: Can a Machine Really Finish Your Sentence?cited by 4,100
- 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,975
- 2024Gemma: Open Models Based on Gemini Research and Technologycited by 916
- 2023The Falcon Series of Open Language Modelscited by 535
- 2020Adversarial Watermarking Transformer: Towards Tracing Text Provenance with Data Hidingcited by 130
3 more
- 2024Open-LLM-Leaderboard: From Multi-choice to Open-style Questions for LLMs Evaluation, Benchmark, and Arenacited by 76
- 2021CoProtector: Protect Open-Source Code against Unauthorized Training Usage with Data Poisoningcited by 47
- 2023Did You Train on My Dataset? Towards Public Dataset Protection with Clean-Label Backdoor Watermarkingcited by 37
Built on by
Citing papers per year: 2025: 3; 2026: 1.
4 papers.
Similar, not cited
Close in wording, no citation either way
- 2024Building Intelligence Identification System via Large Language Model Watermarking: A Survey and Beyond
- 2025StealthInk: A Multi-bit and Stealthy Watermark for Large Language Models
- 2025DERMARK: A Dynamic, Efficient and Robust Multi-bit Watermark for Large Language Models
- 2025BiMark: Unbiased Multilayer Watermarking for Large Language Models
- 2025A Nested Watermark for Large Language Models
- 2024Provably Robust Multi-bit Watermarking for AI-generated Text
- 2025PVMark: Enabling Public Verifiability for LLM Watermarking Schemes
- 2023Baselines for Identifying Watermarked Large Language Models