Attestream：面向机器学习数据流的具有可验证生命周期溯源的使用感知间歇性数据分发
Attestream: Usage-Aware Intermittent Data Distribution with Verifiable Lifecycle Provenance for Machine-Learning Data Streams
浏览论文内容
中文总结 AI 辅助
针对持续数据流无法验证使用情况的问题，提出基于区块链的Attestream架构，通过链上生命周期记录和使用感知门控实现可验证使用报告与泄露归因，实验证明其高效性和鲁棒性。
中文摘要 AI 辅助
持续产生且具有商业价值的数据的提供者——传感器流、遥测数据以及其他作为机器学习训练材料出售的数据流——无法观察到所交付的数据是否被实际使用，而持续流向不活跃消费者的数据扩大了泄露面却不产生价值。我们提出了Attestream，一种基于区块链的架构，用于间歇性交付的数据集流，它将持续交付与可验证的使用报告相结合。每个生命周期事件——数据集准备、双重签名交付、衍生品创建（例如，模型）以及衍生品分发——都被追加到链上注册表中，作为不可否认的、相互关联的生命周期记录。该机制要求可证明的转移，而非代币化：普通合约存储、ERC-721代币和锚定的链下收据是同一协议的可互换表示。一个使用感知门控在报告窗口内未注册衍生品创建记录时暂停消费者的数据流；在下一个交付交易中惰性评估，监控不增加专用交易。一个模态可插拔的指纹层将任何泄露的副本与责任消费者的双重签名交付记录绑定，已实例化用于表格/地理空间记录、图像和文档。我们将注册表实现为带有EIP-712双重签名的Solidity合约，并对其进行评估：一个完整生命周期轮次在普通记录下消耗657k gas（在rollups上花费0.13美元；ERC-721代币化每条记录增加约30k gas），在50个消费者池中，在中等噪声下从40条泄露的表行实现100%的泄露归因，对JPEG重压缩至质量30仍能幸存，并容忍文档高达30%的改写率。
英文摘要
Providers of continuously produced, commercially valuable data -- sensor streams, telemetry, and other feeds sold as machine-learning training material -- cannot observe whether delivered data is actually used, while data that keeps flowing to inactive consumers enlarges the leakage surface without producing value. We present Attestream, a blockchain-based architecture for intermittently delivered dataset streams that couples continued delivery to verifiable usage reporting. Every lifecycle event -- dataset preparation, dual-signed delivery, derivative creation (e.g., a model), and derivative distribution -- is appended to an on-chain registry as a non-repudiable, mutually linked lifecycle record. The mechanism requires provable transfer, not tokenization: plain contract storage, ERC-721 tokens, and anchored off-chain receipts are interchangeable representations of the same protocol. A usage-aware gate suspends a consumer's stream when no derivative-creation record is registered within a reporting window; evaluated lazily inside the next delivery transaction, monitoring adds no dedicated transactions. A modality-pluggable fingerprinting layer binds any leaked copy to the dual-signed delivery record of the responsible consumer, instantiated for tabular/geospatial records, images, and documents. We implement the registry as a Solidity contract with EIP-712 dual signatures and evaluate it: a full lifecycle round costs 657k gas with plain records ($0.13 on rollups; ERC-721 tokenization adds ~30k gas per record), and over a 50-consumer pool leak attribution reaches 100% from 40 leaked table rows under moderate noise, survives JPEG recompression to quality 30, and tolerates paraphrase rates up to 30% for documents.
发表机构
- Kagoshima University（鹿儿岛大学）
机构由 AI 辅助整理，请以论文原文为准。
