公开(公告)号：US11410078B2

公开(公告)日：2022-08-09

申请号：US16297955

申请日：2019-03-11

Applicant: NXP B.V.

Inventor： Joppe Willem Bos ,  Simon Johann Friedberger ,  Christiaan Kuipers ,  Vincent Verneuil ,  Nikita Veshchikov ,  Christine Van Vredendaal ,  Brian Ermans

IPC: G06N20/00 ,  H04L9/08 ,  H04L9/32

Abstract: A method and data processing system for making a machine learning model more resistant to adversarial examples are provided. In the method, an input for a machine learning model is provided. A randomly generated mask is added to the input to produce a modified input. The modified input is provided to the machine learning model. The randomly generated mask negates the effect of a perturbation added to the input for causing the input to be an adversarial example. The method may be implemented using the data processing system.

公开(公告)号：US20200293941A1

公开(公告)日：2020-09-17

申请号：US16297955

申请日：2019-03-11

Applicant: NXP B.V.

Inventor： Joppe Willem Bos ,  Simon Johann Friedberger ,  Christiaan Kuipers ,  Vincent Verneuil ,  Nikita Veshchikov ,  Christine Van Vredendaal ,  Brian Ermans

IPC: G06N20/00 ,  H04L9/08 ,  H04L9/32

Abstract: A method and data processing system for making a machine learning model more resistant to adversarial examples are provided. In the method, an input for a machine learning model is provided. A randomly generated mask is added to the input to produce a modified input. The modified input is provided to the machine learning model. The randomly generated mask negates the effect of a perturbation added to the input for causing the input to be an adversarial example. The method may be implemented using the data processing system.

公开(公告)号：US10146464B2

公开(公告)日：2018-12-04

申请号：US15198104

申请日：2016-06-30

Applicant: NXP B.V.

Inventor： Bruce Murray ,  Helmut Alexander Goettl ,  Sven Heine ,  Christiaan Kuipers

IPC: H04L29/06 ,  G06F21/00 ,  G06F3/06 ,  H04L9/08 ,  G09C1/00

Abstract: A data processing system having a PUF and method for providing multiple enrollments, or instantiations, of the PUF are provided. A PUF segment includes a plurality of SRAM cells on an integrated circuit. A PUF response from the PUF segment is used to create a first activation code and a first PUF key. A second PUF key may be created from the PUF response. Initially, during a second enrollment, the PUF response is combined with the first activation code to reproduce a codeword. The first secret string is reconstructed by encoding the codeword. The codeword is combined with the first activation code to reproduce the PUF response. Inverse anti-aging is applied to the PUF response. Then a second secret string is generated using a random number generator (RNG). The second secret string is encoded to produce a new codeword. The new codeword is combined with the recovered PUF response to create a second activation code. The second activation coded is hashed with the second secret string to provide a second PUF key.