{"id":"https://openalex.org/W7163587416","doi":"https://doi.org/10.48550/arxiv.2606.04459","title":"Token Rankings are Unforgeable Language Model Signatures","display_name":"Token Rankings are Unforgeable Language Model Signatures","publication_year":2026,"publication_date":"2026-06-03","ids":{"openalex":"https://openalex.org/W7163587416","doi":"https://doi.org/10.48550/arxiv.2606.04459"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.04459","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.04459","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.04459","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5045879688","display_name":"Matthew Finlayson","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Finlayson, Matthew","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5036399769","display_name":"Andreas Grivas","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Grivas, Andreas","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137898312","display_name":"Xiang Ren","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ren, Xiang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5137874066","display_name":"Swabha Swayamdipta","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Swayamdipta, Swabha","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10181","display_name":"Natural Language Processing Techniques","score":0.20250000059604645,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10181","display_name":"Natural Language Processing Techniques","score":0.20250000059604645,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.11940000206232071,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11719","display_name":"Data Quality and Management","score":0.05640000104904175,"subfield":{"id":"https://openalex.org/subfields/1803","display_name":"Management Science and Operations Research"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/security-token","display_name":"Security token","score":0.7857000231742859},{"id":"https://openalex.org/keywords/signature","display_name":"Signature (topology)","score":0.776199996471405},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.6635000109672546},{"id":"https://openalex.org/keywords/ranking","display_name":"Ranking (information retrieval)","score":0.6039000153541565},{"id":"https://openalex.org/keywords/language-model","display_name":"Language model","score":0.45559999346733093},{"id":"https://openalex.org/keywords/layer","display_name":"Layer (electronics)","score":0.374099999666214}],"concepts":[{"id":"https://openalex.org/C48145219","wikidata":"https://www.wikidata.org/wiki/Q1335365","display_name":"Security token","level":2,"score":0.7857000231742859},{"id":"https://openalex.org/C2779696439","wikidata":"https://www.wikidata.org/wiki/Q7512811","display_name":"Signature (topology)","level":2,"score":0.776199996471405},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.6635000109672546},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6539999842643738},{"id":"https://openalex.org/C189430467","wikidata":"https://www.wikidata.org/wiki/Q7293293","display_name":"Ranking (information retrieval)","level":2,"score":0.6039000153541565},{"id":"https://openalex.org/C137293760","wikidata":"https://www.wikidata.org/wiki/Q3621696","display_name":"Language model","level":2,"score":0.45559999346733093},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.43810001015663147},{"id":"https://openalex.org/C2779227376","wikidata":"https://www.wikidata.org/wiki/Q6505497","display_name":"Layer (electronics)","level":2,"score":0.374099999666214},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3257000148296356},{"id":"https://openalex.org/C121822524","wikidata":"https://www.wikidata.org/wiki/Q5157582","display_name":"Computer security model","level":2,"score":0.32019999623298645},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.29100000858306885},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2806999981403351},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.2750000059604645},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.2614000141620636},{"id":"https://openalex.org/C97399411","wikidata":"https://www.wikidata.org/wiki/Q825367","display_name":"Coin flipping","level":2,"score":0.2581000030040741},{"id":"https://openalex.org/C168941894","wikidata":"https://www.wikidata.org/wiki/Q3483645","display_name":"Ring signature","level":4,"score":0.2533999979496002}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.04459","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.04459","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.04459","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.04459","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Language":[0],"model":[1,67,94,161,186],"parameters":[2,33],"are":[3,113],"known":[4,87],"to":[5,116,126,134,147,158,170,179],"impose":[6],"unique":[7,70],"(to":[8],"each":[9],"model)":[10],"geometric":[11],"constraints":[12],"on":[13],"their":[14,49],"logit":[15],"outputs,":[16],"which":[17],"serves":[18],"as":[19],"a":[20,64,69,93],"signature":[21,83,162,183],"that":[22,44,60,110],"identifies":[23],"the":[24,29,55,81,85,96,105,119,123,129,136,145,155,160,167],"model,":[25,124],"but":[26,53],"also":[27,62],"leaks":[28],"model's":[30],"final":[31,120],"layer":[32,121],"when":[34],"an":[35,177,181],"API":[36,146,178],"distributes":[37],"logits.":[38],"We":[39],"investigate":[40],"more":[41],"restrictive":[42],"APIs":[43],"expose":[45],"token":[46,111],"rankings":[47,61,75,101,112],"(i.e.,":[48],"ordering":[50],"by":[51,143],"probability,":[52],"not":[54],"probability":[56],"values)":[57],"and":[58,138],"find":[59,109],"constitute":[63],"signature:":[65],"every":[66],"has":[68],"set":[71,98],"of":[72,99,122],"feasible":[73,100],"top-$k$":[74,148,156],"for":[76,176],"sufficiently":[77,151],"large":[78],"$k$.":[79,153],"Furthermore,":[80],"ranking":[82],"is":[84,102,131,163,174],"first":[86],"(polynomially)":[88],"unforgeable":[89,182],"signature,":[90,137],"since":[91],"finding":[92],"with":[95,150],"same":[97],"NP-hard.":[103],"On":[104],"security":[106],"front,":[107],"we":[108],"already":[114],"sufficient":[115],"approximately":[117],"steal":[118],"similar":[125],"logits,":[127],"though":[128],"approximation":[130],"too":[132],"coarse":[133],"forge":[135],"can":[139],"be":[140],"effectively":[141],"countered":[142],"restricting":[144],"tokens":[149],"small":[152],"Since":[154],"required":[157,169],"present":[159,180],"generally":[164],"smaller":[165],"than":[166],"$k$":[168],"prevent":[171],"stealing,":[172],"it":[173],"possible":[175],"without":[184],"leaking":[185],"parameters.":[187]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-06-05T00:00:00"}