在用户级隐私保护下,实现高效低维个性化模型学习。
Private Model Personalization Revisited
- 基于联邦表示框架,通过隐私保护算法学习共享嵌入
- 在非高斯分布下仍保持良好泛化误差,且隐私误差降低约O(dk)倍
- 适用于高维数据场景,尤其适合关注隐私与效率的工业应用
我们在共享表示框架下研究用户级差分隐私(DP)条件下的模型个性化问题。有 $n$ 个用户,其数据统计异质,最优参数共享一个未知嵌入 $U^* \in\mathbb{R}^{d\times k}$,将 $\mathbb{R}^d$ 中的用户参数映射到低维 $\mathbb{R}^k$ 表示,其中 $k\ll d$。目标是在联邦设置下,以小超出风险恢复共享嵌入和本地低维表示。我们提出一种私有的、高效的联邦学习算法,基于 [CHM+21] 的 FedRep 算法。与 [CHM+21] 不同,本算法满足差分隐私,且适用于含噪声标签的情况。相比先前的私有模型个性化工作 [JRS+21],我们的效用保证适用于更广泛的用户分布(次高斯而非高斯分布)。此外,在自然参数条件下,我们使 [JRS+21] 的隐私误差项降低 $\widetilde{O}(dk)$ 倍。在二分类设定中,我们提出信息论构造,用于私有地学习共享嵌入,并得到一个与 $d$ 无关的基于边距的准确率保证。该方法利用 Johnson-Lindenstrauss 变换降低共享嵌入和用户数据的有效维度。结果表明,在边距损失下,此设定中存在维度无关的风险界。
原文摘要 · Abstract (English)
We study model personalization under user-level differential privacy (DP) in the shared representation framework. In this problem, there are $n$ users whose data is statistically heterogeneous, and their optimal parameters share an unknown embedding $U^* \in\mathbb{R}^{d\times k}$ that maps the user parameters in $\mathbb{R}^d$ to low-dimensional representations in $\mathbb{R}^k$, where $k\ll d$. Our goal is to privately recover the shared embedding and the local low-dimensional representations with small excess risk in the federated setting. We propose a private, efficient federated learning algorithm to learn the shared embedding based on the FedRep algorithm in [CHM+21]. Unlike [CHM+21], our algorithm satisfies differential privacy, and our results hold for the case of noisy labels. In contrast to prior work on private model personalization [JRS+21], our utility guarantees hold under a larger class of users' distributions (sub-Gaussian instead of Gaussian distributions). Additionally, in natural parameter regimes, we improve the privacy error term in [JRS+21] by a factor of $\widetilde{O}(dk)$. Next, we consider the binary classification setting. We present an information-theoretic construction to privately learn the shared embedding and derive a margin-based accuracy guarantee that is independent of $d$. Our method utilizes the Johnson-Lindenstrauss transform to reduce the effective dimensions of the shared embedding and the users' data. This result shows that dimension-independent risk bounds are possible in this setting under a margin loss.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。