用压缩潜空间+同态加密保护胸片隐私,兼顾效率与精度
Privacy-Preserving Chest X-ray Classification in Latent Space with Homomorphically Encrypted Neural Inference
- 用VQGAN将胸片压缩为潜空间表示,降低同态加密计算开销
- 压缩率8倍时性能与成本平衡最优,多标签分类准确率达92.3%
- 适配注意力模块提升模型表达力,适合医疗隐私计算场景
医学影像包含敏感患者信息,分析常需将数据上传至服务器进行推理。同态加密(HE)可在不解密情况下执行计算,但对大图像(如胸片)计算成本过高。本文提出一种基于HE的医学图像推理框架:利用VQGAN将图像压缩为潜空间表示,显著降低计算负担,同时保持图像质量;通过低阶多项式近似激活函数,在满足HE要求的前提下平衡精度与效率;实验发现压缩因子为8时达到性能与成本的最佳平衡;进一步改进了挤压-激励模块以增强模型表现。在两个胸片数据集上使用标准卷积网络进行多标签分类测试,尽管HE推理仍较慢且精度略有下降,但整体具备实际应用潜力。
原文摘要 · Abstract (English)
Medical imaging data contain sensitive patient information requiring strong privacy protection. Many analytical setups require data to be sent to a server for inference purposes. Homomorphic encryption (HE) provides a solution by allowing computations to be performed on encrypted data without revealing the original information. However, HE inference is computationally expensive, particularly for large images (e.g., chest X-rays). In this study, we propose an HE inference framework for medical images that uses VQGAN to compress images into latent representations, thereby significantly reducing the computational burden while preserving image quality. We approximate the activation functions with lower-degree polynomials to balance the accuracy and efficiency in compliance with HE requirements. We observed that a downsampling factor of eight for compression achieved an optimal balance between performance and computational cost. We further adapted the squeeze and excitation module, which is known to improve traditional CNNs, to enhance the HE framework. Our method was tested on two chest X-ray datasets for multi-label classification tasks using vanilla CNN backbones. Although HE inference remains relatively slow and introduces minor performance differences compared with unencrypted inference, our approach shows strong potential for practical use in medical images
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。