arXiv:2410.22303cs.CRcs.AI2024-10中稿 · CRYPTO 2025被引 1

提出单轮私有聚合机制,让客户端仅说一次话即可完成隐私保护联邦学习。

$\mathsf{OPA}$: One-shot Private Aggregation with Single Client Interaction and its Applications to Federated Learning

  • 客户端每轮只通信一次,简化动态参与与掉线处理。
  • 在多个数据集上实测性能优于现有方案,支持逻辑回归与MLP模型训练。
  • 无需复杂委员会选举,实现自适应安全,适合实际部署的联邦学习场景。

本研究旨在减少安全计算中的交互次数,以应对通信轮次带来的高成本与挑战,尤其适用于大量客户端的场景。我们重新审视单服务器环境下的安全聚合问题,提出一种单轮私有聚合(OPA)机制:客户端在每次聚合评估中仅需发言一次(甚至可选择不发言)。由于客户端每轮仅通信一次,该设计简化了掉线管理和动态参与问题,与明文安全聚合一致,区别于传统多轮协议。我们基于LWR、LWE、类群、DCR构建OPA,并应用于隐私保护联邦学习(FL),实现客户端单次发声。这与由Bonawitz等人(CCS, 2017)开创的多轮联邦学习协议形成鲜明对比。此外,不同于通用安全计算中的YOSO模型,OPA无需复杂委员会选择协议即可实现自适应安全。除了渐近优势,OPA具有实用性,在两个数据集上对逻辑回归分类器进行基准测试,并构建了用于训练MNIST、CIFAR-10和CIFAR-100的MLP分类器。我们实现了两种形式的OPA:(1)基于阈值密钥同态伪随机函数;(2)基于种子同态伪随机生成器与秘密共享。

原文摘要 · Abstract (English)

Our work aims to minimize interaction in secure computation due to the high cost and challenges associated with communication rounds, particularly in scenarios with many clients. In this work, we revisit the problem of secure aggregation in the single-server setting where a single evaluation server can securely aggregate client-held individual inputs. Our key contribution is the introduction of One-shot Private Aggregation ($\mathsf{OPA}$) where clients speak only once (or even choose not to speak) per aggregation evaluation. Since each client communicates only once per aggregation, this simplifies managing dropouts and dynamic participation, contrasting with multi-round protocols and aligning with plaintext secure aggregation, where clients interact only once. We construct $\mathsf{OPA}$ based on LWR, LWE, class groups, DCR and demonstrate applications to privacy-preserving Federated Learning (FL) where clients \emph{speak once}. This is a sharp departure from prior multi-round FL protocols whose study was initiated by Bonawitz et al. (CCS, 2017). Moreover, unlike the YOSO (You Only Speak Once) model for general secure computation, $\mathsf{OPA}$ eliminates complex committee selection protocols to achieve adaptive security. Beyond asymptotic improvements, $\mathsf{OPA}$ is practical, outperforming state-of-the-art solutions. We benchmark logistic regression classifiers for two datasets, while also building an MLP classifier to train on MNIST, CIFAR-10, and CIFAR-100 datasets. We build two flavors of $\caps$ (1) from (threshold) key homomorphic PRF and (2) from seed homomorphic PRG and secret sharing.

联邦学习安全聚合单轮通信隐私计算

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。