arXiv:2409.09532cs.LGcs.CY2024-09

用合成数据解决协作学习中的公平性与隐私难题。

Using Synthetic Data to Mitigate Unfairness and Preserve Privacy in Collaborative Machine Learning

  • 先生成公平性导向的合成数据,再加差分隐私处理。
  • 仅需一次通信,降低开销且保护隐私。
  • 适合注重公平与隐私的分布式学习场景。

在分布式计算环境中,协作机器学习允许多个客户端协同训练全局模型。为保护隐私,通常采用频繁传递模型参数的方式,但导致通信成本高。为应对分布环境中的不公平问题,需向服务器发送客户端特定信息(如本地数据集大小或公平性指标),这可能造成客户端信息泄露。为此,我们提出两阶段策略:第一阶段,每个客户端利用本地数据通过双层优化问题生成合成数据,确保最终全局模型预测公平;第二阶段,对第一阶段的合成数据应用差分隐私方法生成第二版合成数据,再将各客户端的第二阶段合成数据传至服务器,由服务器使用传统机器学习方法训练模型(无需再考虑公平性指标或隐私问题)。该方法避免了公平性聚合权重的计算,同时保护了客户端隐私。我们的方法仅需一次客户端与服务器间的通信,通信成本低,兼顾隐私保护与公平性。实验证明了该方法的优势。

原文摘要 · Abstract (English)

In distributed computing environments, collaborative machine learning enables multiple clients to train a global model collaboratively. To preserve privacy in such settings, a common technique is to utilize frequent updates and transmissions of model parameters. However, this results in high communication costs between the clients and the server. To tackle unfairness concerns in distributed environments, client-specific information (e.g., local dataset size or data-related fairness metrics) must be sent to the server to compute algorithmic quantities (e.g., aggregation weights), which leads to a potential leakage of client information. To address these challenges, we propose a two-stage strategy that promotes fair predictions, prevents client-data leakage, and reduces communication costs in certain scenarios without the need to pass information between clients and server iteratively. In the first stage, for each client, we use its local dataset to obtain a synthetic dataset by solving a bilevel optimization problem that aims to ensure that the ultimate global model yields fair predictions. In the second stage, we apply a method with differential privacy guarantees to the synthetic dataset from the first stage to obtain a second synthetic data. We then pass each client's second-stage synthetic dataset to the server, the collection of which is used to train the server model using conventional machine learning techniques (that no longer need to take fairness metrics or privacy into account). Thus, we eliminate the need to handle fairness-specific aggregation weights while preserving client privacy. Our approach requires only a single communication between the clients and the server (thus making it communication cost-effective), maintains data privacy, and promotes fairness. We present empirical evidence to demonstrate the advantages of our approach.

协作学习公平性隐私保护合成数据

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。