arXiv:2508.07873cs.CRcs.DC2025-08被引 3

用加密技术让客户端悄悄删数据,服务器完全不知道。

EFU: Enforcing Federated Unlearning via Functional Encryption

  • 用功能加密绑定更新,防服务器乱算或识破删除请求。
  • 遗忘数据准确率接近随机,模型性能几乎不降。
  • 适合注重隐私的联邦学习场景,尤其怕被追踪的用户。

联邦遗忘(Federated Unlearning, FU)算法使联邦学习中的客户端能够通过移除其数据对协同训练模型的影响,行使“被遗忘权”。现有方法虽在客户端本地执行遗忘并仅发送目标更新以保护数据隐私,但常依赖服务器配合,暴露客户端意图与身份,损害自主性与遗忘隐私。本文提出EFU(Enforced Federated Unlearning),一种基于密码学强制的联邦遗忘框架,使客户端可发起遗忘操作,同时向服务器隐藏其发生。具体地,EFU利用功能加密将加密更新绑定至特定聚合函数,确保服务器无法执行未授权计算,也无法检测或跳过遗忘请求。为进一步掩盖聚合模型中的行为与参数变化,引入基于对抗样本和参数重要性正则化的辅助遗忘损失。大量实验表明,EFU在遗忘数据上实现接近随机的准确率,同时在不同数据集与神经网络架构下保持与全量重训练相当的性能,且完全隐藏遗忘意图。此外,证明了EFU与底层遗忘算法无关,可为任意生成目标更新的客户端遗忘机制提供安全、函数隐藏且可验证的遗忘保障。

原文摘要 · Abstract (English)

Federated unlearning (FU) algorithms allow clients in federated settings to exercise their ''right to be forgotten'' by removing the influence of their data from a collaboratively trained model. Existing FU methods maintain data privacy by performing unlearning locally on the client-side and sending targeted updates to the server without exposing forgotten data; yet they often rely on server-side cooperation, revealing the client's intent and identity without enforcement guarantees - compromising autonomy and unlearning privacy. In this work, we propose EFU (Enforced Federated Unlearning), a cryptographically enforced FU framework that enables clients to initiate unlearning while concealing its occurrence from the server. Specifically, EFU leverages functional encryption to bind encrypted updates to specific aggregation functions, ensuring the server can neither perform unauthorized computations nor detect or skip unlearning requests. To further mask behavioral and parameter shifts in the aggregated model, we incorporate auxiliary unlearning losses based on adversarial examples and parameter importance regularization. Extensive experiments show that EFU achieves near-random accuracy on forgotten data while maintaining performance comparable to full retraining across datasets and neural architectures - all while concealing unlearning intent from the server. Furthermore, we demonstrate that EFU is agnostic to the underlying unlearning algorithm, enabling secure, function-hiding, and verifiable unlearning for any client-side FU mechanism that issues targeted updates.

联邦学习数据删除加密隐私保护

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。