为大模型时代强化学习的隐私问题提出新保护框架
Position Paper: Rethinking Privacy in RL for Sequential Decision-making in the Age of LLMs
- 提出多尺度、行为模式、协作隐私与上下文自适应四原则
- 揭示隐私、效用与可解释性间的内在矛盾
- 适合关注高风险领域AI隐私的科研与工程人员
强化学习在关键现实应用中的兴起,要求重新思考AI系统的隐私问题。传统隐私框架仅保护孤立数据点,难以应对序列决策系统中由时间模式、行为策略和协同动态产生的敏感信息。联邦强化学习(FedRL)和基于大语言模型(LLMs)的人类反馈强化学习(RLHF)等现代范式,因引入复杂、交互性强且依赖上下文的学习环境,使隐私挑战加剧。本文主张建立以四个核心原则为基础的新隐私范式:多尺度保护、行为模式保护、协作隐私保护与上下文自适应。这些原则揭示了隐私、效用与可解释性之间的内在张力,需在医疗、自动驾驶及由大模型驱动的决策支持系统等高风险领域中妥善权衡。为此,亟需发展新的理论框架、实用机制与严格评估方法,以实现序列决策系统中的有效隐私保护。
原文摘要 · Abstract (English)
The rise of reinforcement learning (RL) in critical real-world applications demands a fundamental rethinking of privacy in AI systems. Traditional privacy frameworks, designed to protect isolated data points, fall short for sequential decision-making systems where sensitive information emerges from temporal patterns, behavioral strategies, and collaborative dynamics. Modern RL paradigms, such as federated RL (FedRL) and RL with human feedback (RLHF) in large language models (LLMs), exacerbate these challenges by introducing complex, interactive, and context-dependent learning environments that traditional methods do not address. In this position paper, we argue for a new privacy paradigm built on four core principles: multi-scale protection, behavioral pattern protection, collaborative privacy preservation, and context-aware adaptation. These principles expose inherent tensions between privacy, utility, and interpretability that must be navigated as RL systems become more pervasive in high-stakes domains like healthcare, autonomous vehicles, and decision support systems powered by LLMs. To tackle these challenges, we call for the development of new theoretical frameworks, practical mechanisms, and rigorous evaluation methodologies that collectively enable effective privacy protection in sequential decision-making systems.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。