Safe-Sora: Safe Text-to-Video Generation via Graphical Watermarking

Chun Yuan (Tsinghua University) · Fei Yu (The Chinese University of Hong Kong, Shenzhen) · Ming Li (University of Central Florida) · Zihan Su (Tsinghua University) · Xuerui Qiu (Institute of automation, Chinese Academy of Sciences) · Hongbin Xu Xu (South China University of Technology) · Tangyu Jiang (Beijing Normal University) · Jun-hao Zhuang (Tencent ARC Lab) · Shengfeng He (Singapore Management University)
3d wavelet transformcopyright preservationgenerative video modelsgraphical watermarkshierarchical coarse-to-fine matchinginvisible generative watermarkinglong-range dependenciesmamba architecturerobustnessspatiotemporal fusionstate space modelsvideo qualityvisual similaritywatermark embeddingwatermark fidelity

The explosive growth of generative video models has amplified the demand for reliable copyright preservation of AI-generated content. Despite its popularity in image synthesis, invisible generative watermarking remains largely underexplored in video generation. To address this gap, we propose Safe-Sora, the first framework to embed graphical watermarks directly into the video generation process. Motivated by the observation that watermarking performance is closely tied to the visual similarity between the watermark and cover content, we introduce a hierarchical coarse-to-fine adaptive matching mechanism. Specifically, the watermark image is divided into patches, each assigned to the most visually similar video frame, and further localized to the optimal spatial region for seamless embedding. To enable spatiotemporal fusion of watermark patches across video frames, we develop a 3D wavelet transform-enhanced Mamba architecture with a novel scanning strategy, effectively modeling long-range dependencies during watermark embedding and retrieval. To the best of our knowledge, this is the first attempt to apply state space models to watermarking, opening new avenues for efficient and robust watermark protection. Extensive experiments demonstrate that Safe-Sora achieves state-of-the- art performance in terms of video quality, watermark fidelity, and robustness, which is largely attributed to our proposals. Code and additional supporting materials are provided in the supplementary.