English

SpanKey: Dynamic Key Space Conditioning for Neural Network Access Control

Cryptography and Security 2026-05-19 v2 Artificial Intelligence

Abstract

SpanKey is a lightweight way to gate inference without encrypting weights or chasing leaderboard accuracy on gated inference. The idea is to condition activations on secret keys. A basis matrix BB defines a low-dimensional key subspace Span(B)Span(B); during training we sample coefficients α\alpha and form keys k=αBk=\alpha^\top B, then inject them into intermediate activations with additive or multiplicative maps and strength γ\gamma. Valid keys lie in Span(B)Span(B); invalid keys are sampled outside that subspace. We make three points. (i) Mechanism: subspace key injection and a multi-layer design space. (ii) Failure mode: key absorption, together with two analytical results (a Beta-energy split and margin-tail diagnostics), explains weak baseline separation in energy and margin terms -- these are not a security theorem. iii) Deny losses and experiments: Modes A--C and extensions, with CIFAR-10 ResNet-18 runs and MNIST ablations for Mode B. We summarize setup and first-order analysis, injectors, absorption, deny losses and ablations, a threat discussion that does not promise cryptography, and closing remarks on scale. Code: \texttt{https://github.com/mindmemory-ai/dksc}

Keywords

Cite

@article{arxiv.2604.12254,
  title  = {SpanKey: Dynamic Key Space Conditioning for Neural Network Access Control},
  author = {WenBin Yan},
  journal= {arXiv preprint arXiv:2604.12254},
  year   = {2026}
}

Comments

15 pages, 1 figure, multiple tables. Preprint (not yet published in a journal). Affiliation: University of Colorado Boulder. Code: https://github.com/mindmemory-ai/dksc

R2 v1 2026-07-01T12:07:54.638Z