METHOD AND APPARATUS FOR ENCRYPTING MODEL, ELECTRONIC DEVICE, AND COMPUTER-READABLE STORAGE MEDIUM

Abstract

Disclosed are a method and apparatus for encrypting a model, an electronic device, and a computer-readable storage medium. The method includes: determining at least one to-be-encrypted operator in a neural network model; determining a to-be-encrypted data volume corresponding to a respective to-be-encrypted operator of the at least one to-be-encrypted operator based on a data volume adjustment coefficient and a total data volume corresponding to a type of the respective to-be-encrypted operator; determining information on a position of a to-be-encrypted target subsequence of weights in a sequence of weights corresponding to the respective to-be-encrypted operator based on the to-be-encrypted data volume corresponding to the respective to-be-encrypted operator and a number of subsequences of weights corresponding to the respective to-be-encrypted operator; and encrypting the to-be-encrypted target subsequence of weights based on a mode of encryption of the respective to-be-encrypted operator and the information on the position of the to-be-encrypted target subsequence of weights. Using this disclosure, it is enabled to lower the duration of decryption of the neural network model while still guaranteeing safety of the neural network model.

IPC Classifications