{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,9,16]],"date-time":"2025-09-16T16:47:24Z","timestamp":1758041244052,"version":"3.44.0"},"publisher-location":"Cham","reference-count":32,"publisher":"Springer Nature Switzerland","isbn-type":[{"type":"print","value":"9783032045577"},{"type":"electronic","value":"9783032045584"}],"license":[{"start":{"date-parts":[[2025,9,12]],"date-time":"2025-09-12T00:00:00Z","timestamp":1757635200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2025,9,12]],"date-time":"2025-09-12T00:00:00Z","timestamp":1757635200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026]]},"DOI":"10.1007\/978-3-032-04558-4_7","type":"book-chapter","created":{"date-parts":[[2025,9,11]],"date-time":"2025-09-11T11:16:59Z","timestamp":1757589419000},"page":"80-92","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["FedTP: Traceable Passport-Based Ownership Verification for\u00a0Federated Deep Neural Network Models"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0009-0003-3544-3311","authenticated-orcid":false,"given":"QiRui","family":"Sa","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7068-1700","authenticated-orcid":false,"given":"YiFei","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7060-5820","authenticated-orcid":false,"given":"WeiJing","family":"You","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0000-6475-9524","authenticated-orcid":false,"given":"CunQing","family":"Ma","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0007-7088-5974","authenticated-orcid":false,"given":"WeiYang","family":"Qiu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2025,9,12]]},"reference":[{"key":"7_CR1","unstructured":"Adi, Y., Baum, C., Cisse, M., Pinkas, B., Keshet, J.: Turning your weakness into a strength: Watermarking deep neural networks by backdooring. In: 27th USENIX security symposium (USENIX Security 18), pp. 1615\u20131631 (2018)"},{"key":"7_CR2","unstructured":"Bonawitz, K.: Towards federated learning at scale: Syste m design (2019). arXiv preprint arXiv:1902.01046"},{"key":"7_CR3","doi-asserted-by":"crossref","unstructured":"Darvish\u00a0Rouhani, B., Chen, H., Koushanfar, F.: Deepsigns: An end-to-end watermarking framework for ownership protection of deep neural networks. In: Proceedings of the twenty-fourth international conference on architectural support for programming languages and operating systems, pp. 485\u2013497 (2019)","DOI":"10.1145\/3297858.3304051"},{"key":"7_CR4","unstructured":"Fan, L., Ng, K.W., Chan, C.S.: Rethinking deep neural network ownership verification: Embedding passports to defeat ambiguity attacks. Adv. Neural Inf. Process. Syst. 32 (2019)"},{"key":"7_CR5","series-title":"Lecture Notes in Computer Science (Lecture Notes in Artificial Intelligence)","doi-asserted-by":"publisher","first-page":"363","DOI":"10.1007\/978-3-030-55393-7_33","volume-title":"Knowledge Science, Engineering and Management","author":"L Feng","year":"2020","unstructured":"Feng, L., Zhang, X.: Watermarking neural network with compensation mechanism. In: Li, G., Shen, H.T., Yuan, Y., Wang, X., Liu, H., Zhao, X. (eds.) KSEM 2020. LNCS (LNAI), vol. 12275, pp. 363\u2013375. Springer, Cham (2020). https:\/\/doi.org\/10.1007\/978-3-030-55393-7_33"},{"key":"7_CR6","doi-asserted-by":"crossref","unstructured":"Guo, J., Potkonjak, M.: Watermarking deep neural networks for embedded systems. In: 2018 IEEE\/ACM International Conference on Computer-Aided Design (ICCAD), pp.\u00a01\u20138. IEEE (2018)","DOI":"10.1145\/3240765.3240862"},{"key":"7_CR7","doi-asserted-by":"crossref","unstructured":"He, K., Zhang, X., Ren, S., Sun, J.: Deep residual learning for image recognition. In: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, pp. 770\u2013778 (2016)","DOI":"10.1109\/CVPR.2016.90"},{"issue":"13","key":"7_CR8","doi-asserted-by":"publisher","first-page":"9233","DOI":"10.1007\/s00521-019-04434-z","volume":"32","author":"E Le Merrer","year":"2020","unstructured":"Le Merrer, E., Perez, P., Tr\u00e9dan, G.: Adversarial frontier stitching for remote neural network watermarking. Neural Comput. Appl. 32(13), 9233\u20139244 (2020)","journal-title":"Neural Comput. Appl."},{"issue":"4","key":"7_CR9","doi-asserted-by":"publisher","first-page":"4521","DOI":"10.1109\/TPAMI.2022.3195956","volume":"45","author":"B Li","year":"2022","unstructured":"Li, B., Fan, L., Gu, H., Li, J., Yang, Q.: Fedipr: Ownership verification for federated deep neural network models. IEEE Trans. Pattern Anal. Mach. Intell. 45(4), 4521\u20134536 (2022)","journal-title":"IEEE Trans. Pattern Anal. Mach. Intell."},{"key":"7_CR10","doi-asserted-by":"crossref","unstructured":"Li, F.Q., Wang, S.L., Liew, A.W.C.: Watermarking protocol for deep neural network ownership regulation in federated learning. In: 2022 IEEE International Conference on Multimedia and Expo Workshops (ICMEW), pp.\u00a01\u20134. IEEE (2022)","DOI":"10.1109\/ICMEW56448.2022.9859395"},{"issue":"3","key":"7_CR11","doi-asserted-by":"publisher","first-page":"50","DOI":"10.1109\/MSP.2020.2975749","volume":"37","author":"T Li","year":"2020","unstructured":"Li, T., Sahu, A.K., Talwalkar, A., Smith, V.: Federated learning: challenges, methods, and future directions. IEEE Signal Process. Mag. 37(3), 50\u201360 (2020)","journal-title":"IEEE Signal Process. Mag."},{"key":"7_CR12","doi-asserted-by":"crossref","unstructured":"Li, Z., Hu, C., Zhang, Y., Guo, S.: How to prove your model belongs to you: a blind-watermark based framework to protect intellectual property of DNN. In: Proceedings of the 35th annual computer security applications conference, pp. 126\u2013137 (2019)","DOI":"10.1145\/3359789.3359801"},{"key":"7_CR13","unstructured":"Liang, J., Wang, R.: Fedcip: Federated client intellectual property protection with traitor tracking (2023). arXiv preprint arXiv:2306.01356"},{"key":"7_CR14","unstructured":"McMahan, B., Moore, E., Ramage, D., Hampson, S., y\u00a0Arcas, B.A.: Communication-efficient learning of deep networks from decentralized data. In: Artificial intelligence and statistics, pp. 1273\u20131282. PMLR (2017)"},{"key":"7_CR15","doi-asserted-by":"crossref","unstructured":"Namba, R., Sakuma, J.: Robust watermarking of neural network with exponential weighting. In: Proceedings of the 2019 ACM Asia Conference on Computer and Communications Security, pp. 228\u2013240 (2019)","DOI":"10.1145\/3321705.3329808"},{"key":"7_CR16","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2024.123776","volume":"249","author":"H Nie","year":"2024","unstructured":"Nie, H., Lu, S.: Fedcrmw: Federated model ownership verification with compression-resistant model watermarking. Expert Syst. Appl. 249, 123776 (2024)","journal-title":"Expert Syst. Appl."},{"key":"7_CR17","doi-asserted-by":"publisher","DOI":"10.1016\/j.knosys.2024.111675","volume":"293","author":"H Nie","year":"2024","unstructured":"Nie, H., Lu, S.: Persistverify: federated model ownership verification with spatial attention and boundary sampling. Knowl.-Based Syst. 293, 111675 (2024)","journal-title":"Knowl.-Based Syst."},{"key":"7_CR18","doi-asserted-by":"crossref","unstructured":"Peng, Z., Li, S., Chen, G., Zhang, C., Zhu, H., Xue, M.: Fingerprinting deep neural networks globally via universal adversarial perturbations. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp. 13430\u201313439 (2022)","DOI":"10.1109\/CVPR52688.2022.01307"},{"key":"7_CR19","doi-asserted-by":"crossref","unstructured":"Shao, S., Yang, W., Gu, H., Qin, Z., Fan, L., Yang, Q.: Fedtracker: Furnishing ownership verification and traceability for federated learning model. IEEE Trans. Dependable Sec. Comput. (2024)","DOI":"10.1109\/TDSC.2024.3390761"},{"key":"7_CR20","unstructured":"Sun, S., Xue, M., Wang, J., Liu, W.: Protecting the intellectual properties of deep neural networks with an additional class and steganographic images (2021). arXiv preprint arXiv:2104.09203"},{"key":"7_CR21","doi-asserted-by":"crossref","unstructured":"Tekgul, B.G., Xia, Y., Marchal, S., Asokan, N.: Waffle: Watermarking in federated learning. In: 2021 40th International Symposium on Reliable Distributed Systems (SRDS), pp. 310\u2013320. IEEE (2021)","DOI":"10.1109\/SRDS53918.2021.00038"},{"key":"7_CR22","doi-asserted-by":"crossref","unstructured":"Uchida, Y., Nagai, Y., Sakazawa, S., et\u00a0al.: Embedding watermarks into deep neural networks. In: Proceedings of the 2017 ACM on International Conference on Multimedia Retrieval, pp. 269\u2013277 (2017). https:\/\/dl.acm.org\/doi\/10.1145\/3098771.3098783","DOI":"10.1145\/3078971.3078974"},{"key":"7_CR23","unstructured":"Vaswani, A., et al.: Attention is all you need. In: Advances in Neural Information Processing Systems, pp. 5998\u20136008 (2017)"},{"key":"7_CR24","doi-asserted-by":"publisher","first-page":"1","DOI":"10.2352\/ISSN.2470-1173.2020.4.MWSF-022","volume":"32","author":"J Wang","year":"2020","unstructured":"Wang, J., Wu, H., Zhang, X., Yao, Y.: Watermarking in deep neural networks via error back-propagation. Electron. Imaging 32, 1\u20139 (2020)","journal-title":"Electron. Imaging"},{"key":"7_CR25","doi-asserted-by":"crossref","unstructured":"Wang, T., Kerschbaum, F.: Riga: Covert and robust white-box watermarking of deep neural networks. In: Proceedings of the Web Conference 2021, pp. 993\u20131004 (2021)","DOI":"10.1145\/3442381.3450000"},{"key":"7_CR26","unstructured":"Xu, Y., et al.: Robwe: Robust watermark embedding for personalized federated learning model ownership protection (2024). arXiv preprint arXiv:2402.19054"},{"issue":"1","key":"7_CR27","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3630636","volume":"15","author":"W Yang","year":"2023","unstructured":"Yang, W., et al.: Watermarking in secure federated learning: a verification framework based on client-side backdooring. ACM Trans. Intell. Syst. Technol. 15(1), 1\u201325 (2023)","journal-title":"ACM Trans. Intell. Syst. Technol."},{"key":"7_CR28","unstructured":"Yang, W., et al.: Fedzkp: Federated model ownership verification with zero-knowledge proof (2023). arXiv preprint arXiv:2305.04507"},{"key":"7_CR29","unstructured":"Yang, W., et al.: Fedsov: Federated model secure ownership verification with unforgeable signature (2023). arXiv preprint arXiv:2305.06085"},{"key":"7_CR30","unstructured":"Yu, S., Hong, J., Zeng, Y., Wang, F., Jia, R., Zhou, J.: Who leaked the model? tracking IP infringers in accountable federated learning (2023)"},{"key":"7_CR31","doi-asserted-by":"crossref","unstructured":"Zhang, J., et al.: Protecting intellectual property of deep neural networks with watermarking. In: Proceedings of the 2018 on Asia conference on computer and communications security, pp. 159\u2013172 (2018)","DOI":"10.1145\/3196494.3196550"},{"key":"7_CR32","first-page":"22619","volume":"33","author":"J Zhang","year":"2020","unstructured":"Zhang, J., Chen, D., Liao, J., Zhang, W., Hua, G., Yu, N.: Passport-aware normalization for deep model protection. Adv. Neural. Inf. Process. Syst. 33, 22619\u201322628 (2020)","journal-title":"Adv. Neural. Inf. Process. Syst."}],"container-title":["Lecture Notes in Computer Science","Artificial Neural Networks and Machine Learning \u2013 ICANN 2025"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-032-04558-4_7","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,9,11]],"date-time":"2025-09-11T11:17:12Z","timestamp":1757589432000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-032-04558-4_7"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,9,12]]},"ISBN":["9783032045577","9783032045584"],"references-count":32,"URL":"https:\/\/doi.org\/10.1007\/978-3-032-04558-4_7","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2025,9,12]]},"assertion":[{"value":"12 September 2025","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ICANN","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Artificial Neural Networks","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Kaunas","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Lithuania","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2025","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"9 September 2025","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"12 September 2025","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"34","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"icann2025","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/e-nns.org\/icann2025\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}