Search papers, labs, and topics across Lattice.
The paper introduces GeoMark, a novel watermarking framework for Embedding-as-a-Service (EaaS) that addresses the robustness-utility-verifiability trade-off of existing methods. GeoMark uses in-manifold embeddings as watermark targets and geometry-separated anchors with adaptive local neighborhoods to decouple watermark triggering from ownership attribution. Experiments demonstrate that GeoMark maintains utility and geometric fidelity while achieving robust copyright verification against paraphrasing, dimensional perturbation, and CSE attacks.
Embedding watermarks can now be robust to paraphrasing, dimensionality changes, and adversarial attacks, without sacrificing utility or introducing false positives.
Embedding-as-a-Service (EaaS) has become an important semantic infrastructure for natural language and multimedia applications, but it is highly vulnerable to model stealing and copyright infringement. Existing EaaS watermarking methods face a fundamental robustness--utility--verifiability tension: trigger-based methods are fragile to paraphrasing, transformation-based methods are sensitive to dimensional perturbation, and region-based methods may incur false positives due to coincidental geometric affinity. To address this problem, we propose GeoMark, a geometry-aware localized watermarking framework for EaaS copyright protection. GeoMark uses a natural in-manifold embedding as a shared watermark target, constructs geometry-separated anchors with explicit target--anchor margins, and activates watermark injection only within adaptive local neighborhoods. This design decouples where watermarking is triggered from what ownership is attributed to, achieving localized triggering and centralized attribution. Experiments on four benchmark datasets show that GeoMark preserves downstream utility and geometric fidelity while maintaining robust copyright verification under paraphrasing, dimensional perturbation, and CSE (Clustering, Selection, Elimination) attacks, with improved verification stability and low false-positive risk.
