在手机等设备上用私有数据适配大模型,既保护隐私又省资源。
Prada: Black-Box LLM Adaptation with Private Data on Resource-Constrained Devices
- 用轻量代理模型本地微调,通过输出差异迭代优化远程大模型
- 相比集中式微调降低60%计算开销,通信成本减少80%
- 适合边缘设备部署,尤其适用于隐私敏感场景
近年来,大语言模型在自然语言处理任务中表现卓越。然而,在资源受限的边缘设备(如智能手机、个人电脑)上,利用存储在本地的私有数据对这些模型进行领域适配仍面临挑战,主要源于隐私顾虑和计算资源有限。现有方法要么因需传输数据而牺牲数据隐私,要么因暴露模型参数而危及模型隐私。为此,我们提出 Prada,一种新型隐私保护且高效的黑箱大模型适配系统,可使用设备端私有数据进行适配。Prada 在用户设备上本地微调一个轻量级代理模型(采用低秩适配,LoRA),推理时通过基线模型与适配后代理模型输出的 logits 偏差(即输出差异)来迭代优化远程黑箱大模型的结果。该基于偏差的适配机制无需共享敏感数据或专有模型参数,有效保障数据与模型隐私。此外,引入推测解码进一步加速推理过程,使系统可在带宽受限的边缘设备上实际部署。大量实验表明,Prada 在多个下游任务上性能接近集中式微调,同时计算开销降低最高达60%,通信成本减少最高达80%。
原文摘要 · Abstract (English)
In recent years, Large Language Models (LLMs) have demonstrated remarkable abilities in various natural language processing tasks. However, adapting these models to specialized domains using private datasets stored on resource-constrained edge devices, such as smartphones and personal computers, remains challenging due to significant privacy concerns and limited computational resources. Existing model adaptation methods either compromise data privacy by requiring data transmission or jeopardize model privacy by exposing proprietary LLM parameters. To address these challenges, we propose Prada, a novel privacy-preserving and efficient black-box LLM adaptation system using private on-device datasets. Prada employs a lightweight proxy model fine-tuned with Low-Rank Adaptation (LoRA) locally on user devices. During inference, Prada leverages the logits offset, i.e., difference in outputs between the base and adapted proxy models, to iteratively refine outputs from a remote black-box LLM. This offset-based adaptation approach preserves both data privacy and model privacy, as there is no need to share sensitive data or proprietary model parameters. Furthermore, we incorporate speculative decoding to further speed up the inference process of Prada, making the system practically deployable on bandwidth-constrained edge devices, enabling a more practical deployment of Prada. Extensive experiments on various downstream tasks demonstrate that Prada achieves performance comparable to centralized fine-tuning methods while significantly reducing computational overhead by up to 60% and communication costs by up to 80%.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。