用相关二值量化实现高隐私低误差的联邦学习新方法
CorBin-FL: A Differentially Private Federated Learning Mechanism using Common Randomness
- 通过相关二值随机量化实现局部差分隐私
- 在相同隐私预算下比高斯/拉普拉斯机制精度更高
- 适合对隐私与模型性能要求高的实际应用
联邦学习(FL)已成为分布式机器学习的有前景框架,允许多个客户端利用分布数据和计算资源进行协作学习。然而,FL面临隐私保障、通信效率与整体模型准确率之间的平衡挑战。本文提出CorBin-FL,一种利用相关二值随机量化实现差分隐私的隐私机制,同时保持模型准确率。该方法使用安全多方计算技术,使客户端在不泄露个体隐私的前提下对本地模型更新进行相关量化。我们提供了理论分析,表明CorBin-FL实现了参数级局部差分隐私(PLDP),并渐近优化了均方误差度量与PLDP隐私度量之间的隐私-效用权衡。我们进一步提出AugCorBin-FL,该扩展在满足PLDP的基础上,还实现了用户级和样本级中央差分隐私保证。针对两种机制,我们推导了隐私参数与均方误差性能的边界。在MNIST和CIFAR10数据集上的大量实验表明,我们的机制在相等的PLDP隐私预算下,模型精度优于现有的差分隐私联邦学习方法,包括高斯和拉普拉斯机制。
原文摘要 · Abstract (English)
Federated learning (FL) has emerged as a promising framework for distributed machine learning. It enables collaborative learning among multiple clients, utilizing distributed data and computing resources. However, FL faces challenges in balancing privacy guarantees, communication efficiency, and overall model accuracy. In this work, we introduce CorBin-FL, a privacy mechanism that uses correlated binary stochastic quantization to achieve differential privacy while maintaining overall model accuracy. The approach uses secure multi-party computation techniques to enable clients to perform correlated quantization of their local model updates without compromising individual privacy. We provide theoretical analysis showing that CorBin-FL achieves parameter-level local differential privacy (PLDP), and that it asymptotically optimizes the privacy-utility trade-off between the mean square error utility measure and the PLDP privacy measure. We further propose AugCorBin-FL, an extension that, in addition to PLDP, achieves user-level and sample-level central differential privacy guarantees. For both mechanisms, we derive bounds on privacy parameters and mean squared error performance measures. Extensive experiments on MNIST and CIFAR10 datasets demonstrate that our mechanisms outperform existing differentially private FL mechanisms, including Gaussian and Laplacian mechanisms, in terms of model accuracy under equal PLDP privacy budgets.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。