CODEWITHSUNDEEP
iosswiftdeep-learningcoremlmlmodel
user3409114
user3409114

Reputation: 47

Hiding CoreML model (.mlmodel) files

I am working on a project which involves adding AI object detection capabilities to an existing iOS APP. I was able to train my own DNN models and converted to the CoreML's .mlmodel format.

Now I need to transfer my work which includes the .mlmodel files to another developer for integration. However, I don't want them to use my trained .mlmodel files outside of this project (according to contract). Is there any way that I can do to just "hide" the .mlmodel files so they can only be used for this particular APP and can't be simply copied and saved for other uses?

I have done some quick research on iOS library and framework, but I am still not sure if that's the solution I am looking for.

Upvotes: 1

Views: 1796

Answers (1)

Matthijs Hollemans
Matthijs Hollemans

Reputation: 7892

Nope. Once someone has access to your mlmodel file or the compiled version, mlmodelc, they can use it elsewhere.

For example, you can download an app from the App Store, look inside the IPA file, copy their mlmodelc folder into your own app, and start using the model right away.

To prevent outsiders from stealing your model, you can encrypt the model (just like you'd encrypt any other file) but that only works if you can hide the decryption key. You can also add a custom layer to the model, so that it becomes useless without the code for this custom layer.

However, those solutions don't work if you're hiring an external developer to work on your app because they will -- out of necessity -- need to have access to these decryption keys and source code files.

I'm not sure what exactly you want this other developer to do, but if you don't trust them, then:

  1. get a new developer that you do trust,
  2. be prepared to enforce the contract, or
  3. give them a version of your mlmodel file with the weights replaced by random numbers. The model will still work but give nonsense predictions. Once that developer is done with their work, replace the model with the real one. Obviously, this is not a good solution if they need to use the model for whatever work they need to do.

Upvotes: 3

Related Questions