面向三维高斯泼溅版权保护的可变形数字水印
Deformable Digital Watermarking for Copyright Protection of 3D Gaussian Splatting
-
摘要: 三维高斯泼溅(3D Gaussian Splatting, 3DGS)的形变技术在拓展建模能力的同时,也引入了新的安全风险:恶意用户可通过形变操作篡改模型内容,进而非法主张所有权。现有3DGS水印方法仅能应对简单的图像级扰动或三维操作,在面对复杂几何形变时难以提供有效保护。为应对上述挑战,本文提出DeformDefender——一种专为抵御未授权形变攻击而设计的可变形三维水印方法。该方法创新性地提出双层可变形水印嵌入策略:通过系统性地分析3DGS形变操作在参数层面与渲染层面对模型的影响机制,进而针对性地设计水印注入方式,确保水印在模型经历形变时仍能保持信息完整性与可提取性。此外,本文还设计了一种对形变具备鲁棒性的水印解码器,能够从严重几何畸变后的渲染图像中稳定恢复水印信息。实验结果表明,DeformDefender在不影响3DGS模型视觉质量与渲染效果的前提下,可有效抵抗恶意形变并保护版权。与现有方法相比,DeformDefender所嵌入水印对模型视觉质量的影响最小,并在二维与三维各类扰动下均表现出最优的鲁棒性。同时,本方法仅需调整模型现有参数即可实现水印嵌入,无需对模型结构进行过多修改,从而保持了对不同3DGS模型变体的良好适配性。本研究为应对形变技术的普及,提供了一种可行、可扩展的三维模型版权保护解决方案。Abstract: While the deformation technology of 3D Gaussian Splatting (3DGS) expands modeling capabilities, it also introduces new security risks: malicious users can tamper with model content through deformation operations and then illegally claim ownership. Existing 3DGS watermarking methods can only cope with simple image-level perturbations or 3D operations and struggle to provide effective protection against complex geometric deformations. To address this challenge, this paper proposes DeformDefender—a deformable 3D watermarking method specifically designed to resist unauthorized deformation attacks. This method innovatively introduces a dual-layer deformable watermark embedding strategy. By systematically analyzing the impact mechanisms of 3DGS deformation operations on the model at both the parameter and rendering levels, a targeted watermark injection scheme is designed to ensure that the watermark maintains its integrity and extractability, even after the model undergoes deformation. Furthermore, a deformation-robust watermark extractor is developed, capable of reliably recovering the watermark information from rendered images subjected to severe geometric distortion. Experimental results demonstrate that DeformDefender can effectively resist malicious deformations and protect copyright without compromising the visual quality or rendering performance of the 3DGS model. Compared to existing methods, the watermark embedded by DeformDefender has minimal impact on the model’s visual quality and exhibits superior robustness against various 2D and 3D perturbations. Additionally, our method requires adjustments to the existing model parameters only for watermark embedding, avoiding extensive modifications to the model structure, thereby maintaining good adaptability to different 3DGS model variants. This research provides a viable and scalable solution for 3D model copyright protection in response to the growing prevalence of deformation techniques.
下载: