Method and system for signing an artificial intelligence watermark using a query

1. A computer-implemented method of a data processing (DP) accelerator, the method comprising:

receiving, by the DP accelerator comprising one of a math co-processor and a DSP, input data from a host device over a secure link of a peripheral component interconnect express (PCIe) communication channel;

executing, by the DP accelerator, a watermark-enabled artificial intelligence (AI) model based on the input data,

receiving, by the DP accelerator, a watermark-enabled kernel over the secure link;

executing, by the DP accelerator, the received watermark-enabled kernel to extract the watermark from the watermark-enabled AI model;

executing, by the DP accelerator, the watermark-enabled kernel to sign the extracted watermark;

transmitting the signed watermark of the watermark-enabled AI model to the host device over the secure link;

whereby the execution of the DP accelerator of the watermark-enabled kernel is faster than a corresponding execution performed by the host;

and whereby the host is configured to verify the signed watermark to determine that the watermark-enabled artificial intelligence (AI) model is authentic because the watermark-enabled kernel is trusted.

2. The method of claim 1 , further comprising receiving, by the DP accelerator, the watermark-enabled AI model from the host device.

3. The method of claim 1 , wherein the receiving input data and transmitting the watermark are performed over a secure link between the host device and the DP accelerator.

4. The method of claim 3 , wherein the secure link comprises a peripheral component interconnect express (PCIe) communication channel.

5. The method of claim 3 , further comprising:

exchanging, by the DP accelerator and the host device, one or more keys; and

performing at least one of:

establishing the secure link using at least one of the one or more keys; or

digitally signing, by the host device, the watermark using one of the one or more keys.

6. The method of claim 1 , further comprising digitally signing the watermark.

7. The method of claim 1 , wherein the input data comprises a query command to return the watermark to the host device.

8. A data processing (DP) accelerator, comprising:

one of a math co-processor and a DSP;

and an interface to receive input data from a host device; an artificial intelligence (AI) unit configured to:

receive input data from a host device over a secure link of a peripheral component interconnect express (PCIe) communication channel;

execute a watermark-enabled artificial intelligence (AI) model based on the input data,

receive a watermark-enabled kernel over the secure link;

execute the received watermark-enabled kernel to extract the watermark from the watermark-enabled AI model;

execute the watermark-enabled kernel to sign the extracted watermark;

transmit the signed watermark of the watermark-enabled AI model to the host device over the secure link;

whereby the execution of the DP accelerator of the watermark-enabled kernel is faster than a corresponding execution performed by the host;

and whereby the host is configured to verify the signed watermark to determine that the watermark-enabled artificial intelligence (AI) model is authentic because the watermark-enabled kernel is trusted.

9. The DP accelerator of claim 8 , wherein the watermark-enabled AI model is received from the host device.

10. The DP accelerator of claim 8 , wherein the input data and the watermark are received and transmitted over a secure link between the host device and the DP accelerator.

11. The DP accelerator of claim 10 , wherein the secure link comprises a peripheral component interconnect express (PCIe) communication channel.

12. The DP accelerator of claim 10 , further comprising a channel manager to

exchange one or more keys with the host device; and

perform at least one of:

establishing the secure link using at least one of the one or more keys, or

digitally signing, by the host device, the watermark using one of the one or more keys.

13. The DP accelerator of claim 8 , further comprising a security unit to digitally sign the watermark.

14. The DP accelerator of claim 8 , wherein the input data comprises a query command to return the watermark to the host device.

15. A non-transitory machine-readable medium having instructions stored therein, which when executed by a processor, cause the processor to perform operations of a data processing (DP) accelerator that comprises one of a math co-processor and a DSP, the operations comprising:

receiving, by the DP accelerator comprising one of a math co-processor and a DSP, input data from a host device over a secure link of a peripheral component interconnect express (PCIe) communication channel;

executing, by the DP accelerator, a watermark-enabled artificial intelligence (AI) model based on the input data,

receiving, by the DP accelerator, a watermark-enabled kernel over the secure link;

executing, by the DP accelerator, the received watermark-enabled kernel to extract the watermark from the watermark-enabled AI model;

executing, by the DP accelerator, the watermark-enabled kernel to sign the extracted watermark

transmitting the signed watermark of the watermark-enabled AI model to the host device over the secure link;

whereby the execution of the DP accelerator of the watermark-enabled kernel is faster than a corresponding execution performed by the host;

and whereby the host is configured to verify the signed watermark to determine that the watermark-enabled artificial intelligence (AI) model is authentic because the watermark-enabled kernel is trusted.

16. The machine-readable medium of claim 15 , wherein the operations further comprise receiving, by the DP accelerator, the watermark-enabled AI model from the host device.

17. The machine-readable medium of claim 15 , wherein the receiving input data and transmitting the watermark are performed over a secure link between the host device and the DP accelerator.

18. The machine-readable medium of claim 17 , wherein the secure link comprises a peripheral component interconnect express (PCIe) communication channel.

19. The machine-readable medium of claim 17 , wherein the operations further comprise:

exchanging, by the DP accelerator and the host device, one or more keys; and

performing at least one of:

establishing the secure link using at least one of the one or more keys; or

digitally signing, by the host device, the watermark using one of the one or more keys.

20. The machine-readable medium of claim 15 , wherein the operations further comprise digitally signing the watermark.