A Note on the Limits of Collusion-Resistant Watermarks

In one proposed use of digital watermarks, the owner of a document D sells slightly different documents, D1 , D2 , . . . to each buyer; if a buyer posts his/her document Di to the web, the owner can identify the source of the leak. More general attacks are however possible in which k buyers create some composite document D∗ ; the goal of the owner is to identify at least one of the conspirators. We show, for a reasonable model of digital watermarks, fundamental limits on their efficacy against collusive attacks. In particular, if the effective document length is n, then at most O( pn/ ln n) adversaries can defeat any watermarking scheme. Our attack is, in the theoretical model, oblivious to the watermarking scheme being used; in practice, it uses very little information about the watermarking scheme. Thus, using a proprietary system seems to give only a very weak defense.

• Type: Conference
• Year: 1999
• Where: EUROCRYPT
• Authors: Funda Ergün, Joe Kilian, Ravi Kumar
• Keywords: Cryptology, Digital Watermarks, Document, EUROCRYPT 1999, Watermarking Scheme