SpanKey: Dynamic Key Space Conditioning for Neural Network Access Control
Not on the map. Why?
Abstract (arXiv)
SpanKey is a lightweight way to gate inference without encrypting weights or chasing leaderboard accuracy on gated inference. The idea is to condition activations on secret keys. A basis matrix B defines a low-dimensional key subspace Span(B); during training we sample coefficients α and form keys k=α^top B, then inject them into intermediate activations with additive or multiplicative maps and strength γ. Valid keys lie in Span(B); invalid keys are sampled outside that subspace. We make three points. (i) Mechanism: subspace key injection and a multi-layer design space. (ii) Failure mode: key absorption, together with two analytical results (a Beta-energy split and margin-tail diagnostics), explains weak baseline separation in energy and margin terms -- these are not a security theorem. iii) Deny losses and experiments: Modes A--C and extensions, with CIFAR-10 ResNet-18 runs and MNIST ablations for Mode B. We summarize setup and first-order analysis, injectors, absorption, deny losses and ablations, a threat discussion that does not promise cryptography, and closing remarks on scale. Code: texttthttps://github.com/mindmemory-ai/dksc
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 8 of its 13 references that are in the map. First posted on arXiv 14 Apr 2026.
Builds on
8 of 13 references.
References · 8
- 2014Explaining and Harnessing Adversarial Examplescited by 7,364
- 2017FiLM: Visual Reasoning with a General Conditioning Layercited by 2,333
- 2016Language Modeling with Gated Convolutional Networkscited by 702
- 2023A Survey of Text Watermarking in the Era of Large Language Modelscited by 112
- 2023Deep Intellectual Property Protection: A Surveycited by 17
- 2024ModelLock: Locking Your Model With a Spellcited by 6
- 2023EncryIP: A Practical Encryption-Based Framework for Model Intellectual Property Protectioncited by 3
- 2025Key-Conditioned Orthonormal Transform Gating (K-OTG): Multi-Key Access Control with Hidden-State Scrambling for LoRA-Tuned Modelscited by 1
Built on by
Not cited yet.