Blockchain system tracks and controls use of data streams for AI training
Attestream: Usage-Aware Intermittent Data Distribution with Verifiable Lifecycle Provenance for Machine-Learning Data Streams
Cryptography and SecurityDistributed, Parallel, and Cluster Computing
Summary
Data providers who sell information streams for machine learning often cannot tell if buyers actually use the data, leading to wasted delivery and risk of leaks. The authors developed Attestream, which uses a blockchain to record every step of data use, from delivery to creating and sharing derivatives like models. It can stop sending data to customers who don’t show signs of using it, saving resources and reducing leaks. Their system links leaked copies back to responsible users with special digital fingerprints and works with different types of data like tables, images, and documents.
blockchainmachine learningdata streamsdigital fingerprintingERC-721 tokensSoliditygas costdata provenanceusage verificationoff-chain receipts
Authors
Kentaro Oda
Abstract
Providers of continuously produced, commercially valuable data -- sensor streams, telemetry, and other feeds sold as machine-learning training material -- cannot observe whether delivered data is actually used, while data that keeps flowing to inactive consumers enlarges the leakage surface without producing value. We present Attestream, a blockchain-based architecture for intermittently delivered dataset streams that couples continued delivery to verifiable usage reporting. Every lifecycle event -- dataset preparation, dual-signed delivery, derivative creation (e.g., a model), and derivative distribution -- is appended to an on-chain registry as a non-repudiable, mutually linked lifecycle record. The mechanism requires provable transfer, not tokenization: plain contract storage, ERC-721 tokens, and anchored off-chain receipts are interchangeable representations of the same protocol. A usage-aware gate suspends a consumer's stream when no derivative-creation record is registered within a reporting window; evaluated lazily inside the next delivery transaction, monitoring adds no dedicated transactions. A modality-pluggable fingerprinting layer binds any leaked copy to the dual-signed delivery record of the responsible consumer, instantiated for tabular/geospatial records, images, and documents. We implement the registry as a Solidity contract with EIP-712 dual signatures and evaluate it: a full lifecycle round costs 657k gas with plain records ($0.13 on rollups; ERC-721 tokenization adds ~30k gas per record), and over a 50-consumer pool leak attribution reaches 100% from 40 leaked table rows under moderate noise, survives JPEG recompression to quality 30, and tolerates paraphrase rates up to 30% for documents.