保护隐私的同时,让多模态大模型更个性化。
Privacy-Preserving Personalized Federated Prompt Learning for Multimodal Large Language Models
- 用低秩分解分离通用与个性化信息,兼顾模型表现与隐私。
- 局部和全局分别加差分隐私,降低噪声对性能的影响。
- 适合需要隐私保护的客服、医疗等个性化多模态场景。
多模态大语言模型(MLLM)通过融合文本、图像和音频等多种模态,正推动客户支持与运营的变革。联邦提示学习(FPL)将预训练的多模态大模型与联邦学习结合,实现个性化且隐私保护的AI系统。然而,在个性化、泛化能力与隐私之间难以平衡:过度个性化易导致过拟合,而严格的差分隐私措施可能损害个性化与泛化性能。本文提出一种差分隐私联邦提示学习(DP-FPL)方法,通过低秩分解捕捉通用特征,同时保留残差项以支持个性化表达。为保障隐私,我们对本地提示的两个低秩成分应用局部差分隐私,对全局提示应用全局差分隐私。实验表明,该方法在保持隐私的前提下有效缓解了隐私噪声对模型性能的影响,并在多个基准测试中优于现有方法。
原文摘要 · Abstract (English)
Multimodal Large Language Models (LLMs) are pivotal in revolutionizing customer support and operations by integrating multiple modalities such as text, images, and audio. Federated Prompt Learning (FPL) is a recently proposed approach that combines pre-trained multimodal LLMs such as vision-language models with federated learning to create personalized, privacy-preserving AI systems. However, balancing the competing goals of personalization, generalization, and privacy remains a significant challenge. Over-personalization can lead to overfitting, reducing generalizability, while stringent privacy measures, such as differential privacy, can hinder both personalization and generalization. In this paper, we propose a Differentially Private Federated Prompt Learning (DP-FPL) approach to tackle this challenge by leveraging a low-rank factorization scheme to capture generalization while maintaining a residual term that preserves expressiveness for personalization. To ensure privacy, we introduce a novel method where we apply local differential privacy to the two low-rank components of the local prompt, and global differential privacy to the global prompt. Our approach mitigates the impact of privacy noise on the model performance while balancing the tradeoff between personalization and generalization. Extensive experiments demonstrate the effectiveness of our approach over other benchmarks.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。