Summary
Many companies sell data streams for machine learning, but they can’t tell if buyers actually use the data or just let it pile up, increasing the risk of leaks. The authors created Attestream, a blockchain-based system that tracks each step of data use, from delivery to creating models, by recording these actions securely on a public ledger. If a buyer doesn’t show they are using the data, their access can be paused. Attestream also adds invisible watermarks to the data to trace leaks back to the responsible buyer. The authors tested this approach and found it works efficiently with different data types and usage patterns.
What this means in practice
- •For data marketplace operators: Control continual data access by verifying actual data usage before delivering more, reducing data leaks and waste.$Commercial implications: Allows marketplaces to sell data access with built-in usage verification and leak tracking, improving trust and monetization.
- •For cloud service providers: Monitor and enforce data usage policies on streamed datasets to prevent unauthorized use and mitigate data leakage risks.
Abstract
Providers of continuously produced, commercially valuable data -- sensor streams, telemetry, and other feeds sold as machine-learning training material -- cannot observe whether delivered data is actually used, while data that keeps flowing to inactive consumers enlarges the leakage surface without producing value. We present Attestream, a blockchain-based architecture for intermittently delivered dataset streams that couples continued delivery to verifiable usage reporting. Every lifecycle event -- dataset preparation, dual-signed delivery, derivative creation (e.g., a model), and derivative distribution -- is appended to an on-chain registry as a non-repudiable, mutually linked lifecycle record. The mechanism requires provable transfer, not tokenization: plain contract storage, ERC-721 tokens, and anchored off-chain receipts are interchangeable representations of the same protocol. A usage-aware gate suspends a consumer's stream when no derivative-creation record is registered within a reporting window; evaluated lazily inside the next delivery transaction, monitoring adds no dedicated transactions. A modality-pluggable fingerprinting layer binds any leaked copy to the dual-signed delivery record of the responsible consumer, instantiated for tabular/geospatial records, images, and documents. We implement the registry as a Solidity contract with EIP-712 dual signatures and evaluate it: a full lifecycle round costs 657k gas with plain records ($0.13 on rollups; ERC-721 tokenization adds ~30k gas per record), and over a 50-consumer pool leak attribution reaches 100% from 40 leaked table rows under moderate noise, survives JPEG recompression to quality 30, and tolerates paraphrase rates up to 30% for documents.