arXiv:2505.01866cs.CRcs.LG2025-05被引 24

用抗量子加密和区块链保护联邦学习,防黑客攻击且效率高。

PQS-BFL: A Post-Quantum Secure Blockchain-based Federated Learning Framework

  • 用抗量子签名认证模型更新,结合优化智能合约实现去中心化验证。
  • 签名平均耗时0.65毫秒,交易平均4.8秒,性能开销极小。
  • 适合医疗等敏感领域,开源可复现,实用性强。

联邦学习(FL)可在保护数据隐私的同时实现协同建模,但其传统密码学基础易受量子攻击威胁,尤其在医疗等敏感领域风险显著。本文提出PQS-BFL(抗量子安全的区块链联邦学习框架),将抗量子密码(PQC)与区块链验证相结合,抵御量子攻击。采用符合FIPS 204标准的ML-DSA-65(原Dilithium)签名对模型更新进行认证,并通过优化智能合约实现去中心化验证。在MNIST、SVHN、HAR等多个数据集上的评估表明,该框架实现高效加密操作:平均签名时间0.65毫秒,验证时间0.53毫秒,签名大小固定为3309字节。区块链集成带来的开销可控,平均交易时间约4.8秒,每更新一次气体消耗约1.72×10⁶单位(PQC配置)。关键的是,加密开销占交易时间比例仅0.01%-0.02%,证明PQC性能非瓶颈。系统保持优异模型精度(如MNIST上超98.8%),且随客户端数量增加,训练轮次时间呈亚线性增长,具备良好扩展性。开源实现与可复现基准验证了长期量子抗性在实际联邦学习系统中的可行性。

原文摘要 · Abstract (English)

Federated Learning (FL) enables collaborative model training while preserving data privacy, but its classical cryptographic underpinnings are vulnerable to quantum attacks. This vulnerability is particularly critical in sensitive domains like healthcare. This paper introduces PQS-BFL (Post-Quantum Secure Blockchain-based Federated Learning), a framework integrating post-quantum cryptography (PQC) with blockchain verification to secure FL against quantum adversaries. We employ ML-DSA-65 (a FIPS 204 standard candidate, formerly Dilithium) signatures to authenticate model updates and leverage optimized smart contracts for decentralized validation. Extensive evaluations on diverse datasets (MNIST, SVHN, HAR) demonstrate that PQS-BFL achieves efficient cryptographic operations (average PQC sign time: 0.65 ms, verify time: 0.53 ms) with a fixed signature size of 3309 Bytes. Blockchain integration incurs a manageable overhead, with average transaction times around 4.8 s and gas usage per update averaging 1.72 x 10^6 units for PQC configurations. Crucially, the cryptographic overhead relative to transaction time remains minimal (around 0.01-0.02% for PQC with blockchain), confirming that PQC performance is not the bottleneck in blockchain-based FL. The system maintains competitive model accuracy (e.g., over 98.8% for MNIST with PQC) and scales effectively, with round times showing sublinear growth with increasing client numbers. Our open-source implementation and reproducible benchmarks validate the feasibility of deploying long-term, quantum-resistant security in practical FL systems.

联邦学习抗量子加密区块链隐私安全

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。