arXiv:2503.07570cs.CRcs.LG2025-03被引 1

分层模型拆分+区块链审计,实现多节点隐私保护训练

Split-n-Chain: Privacy-Preserving Multi-Node Split Learning with Blockchain-Based Auditability

  • 模型层分摊至多个节点,数据与参数均不暴露给其他方
  • 训练损失与单体模型相近,整体耗时可控
  • 区块链记录计算过程,支持可信审计,适合敏感数据场景

深度学习在大量数据下可实现高精度,但隐私保护仍是关键挑战。本文提出Split-n-Chain,一种基于分布式节点的分层学习方法:网络各层由不同节点持有,数据所有者无需共享原始数据,各节点仅掌握自身层的参数,无法获取全局模型信息。同时引入区块链机制,对各节点的计算过程进行可审计记录,增强系统可信度。实验表明,该方法在训练时间效率上表现良好,且损失曲线与单体模型基本一致,验证了其有效性与实用性。

原文摘要 · Abstract (English)

Deep learning, when integrated with a large amount of training data, has the potential to outperform machine learning in terms of high accuracy. Recently, privacy-preserving deep learning has drawn significant attention of the research community. Different privacy notions in deep learning include privacy of data provided by data-owners and privacy of parameters and/or hyperparameters of the underlying neural network. Federated learning is a popular privacy-preserving execution environment where data-owners participate in learning the parameters collectively without leaking their respective data to other participants. However, federated learning suffers from certain security/privacy issues. In this paper, we propose Split-n-Chain, a variant of split learning where the layers of the network are split among several distributed nodes. Split-n-Chain achieves several privacy properties: data-owners need not share their training data with other nodes, and no nodes have access to the parameters and hyperparameters of the neural network (except that of the respective layers they hold). Moreover, Split-n-Chain uses blockchain to audit the computation done by different nodes. Our experimental results show that: Split-n-Chain is efficient, in terms of time required to execute different phases, and the training loss trend is similar to that for the same neural network when implemented in a monolithic fashion.

隐私计算联邦学习区块链模型分片

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。