arXiv:2509.01088cs.CL2025-09ACL被引 3

用知识蒸馏让私密文档高效生成模型参数,兼顾安全与性能。

Privacy-Preserving Reasoning with Knowledge-Distilled Parametric Retrieval Augmented Generation

  • 通过知识蒸馏将文档转为LoRA参数,避免上传原始文本。
  • 在四个数据集上准确率超越基线,对新类型问题泛化能力强。
  • 适合需要保护数据隐私且要求推理性能的场景使用。

当前RAG系统需将明文文档上传至云端,存在隐私泄露风险。参数化RAG(PRAG)将文档编码为大模型中的LoRA参数,可降低原始内容暴露风险。但其仍面临两大挑战:(1) 每个文档需合成问答对并微调模型以生成对应LoRA,导致推理延迟过高;(2) 性能依赖合成问答数据,缺乏与标准RAG的内部对齐,对分布外(OOD)输入泛化能力差。为此,本文提出DistilledPRAG,一种与标准RAG结构对齐、可泛化的知识蒸馏参数化RAG模型。首先,从单文档和多文档中合成问答对以增强跨文档推理;其次,使用特殊标记掩码原始文档,并通过参数生成器将其转化为LoRA,保持标准RAG文档结构;最后,在合成问答数据引导下,训练参数生成器使其隐藏状态和输出逻辑匹配标准RAG,实现无需原始文档的类RAG推理。在四个QA数据集上的实验表明,DistilledPRAG在准确率上优于基线,且在分布外数据上具有良好泛化能力。

原文摘要 · Abstract (English)

The current RAG system requires uploading plaintext documents to the cloud, risking private data leakage. Parametric RAG (PRAG) encodes documents as LoRA parameters within LLMs, offering a possible way to reduce exposure of raw content. However, it still faces two issues: (1) PRAG demands synthesizing QA pairs and fine-tuning LLM for each individual document to create its corresponding LoRA, leading to unacceptable inference latency. (2) The performance of PRAG relies solely on synthetic QA data while lacking internal alignment with standard RAG, resulting in poor generalization on out-of-distribution(OOD) inputs. Therefore, achieving high-efficiency parameterization while maintaining RAG-level performance remains a critical challenge for privacy-preserving reasoning. In this paper, we propose DistilledPRAG, a generalizable knowledge-distilled parametric RAG model aligned with standard RAG in document structure and parameter activation. We first synthesize QA pairs from single and multi-documents to enhance cross-document reasoning. Then, we mask the plaintext documents with a special token and translate them to LoRA via a parameter generator, maintaining the standard RAG document structure. Finally, guided by synthetic QA data, we train the parameter generator to match standard RAG's hidden states and output logits, enabling RAG-style reasoning without original documents. Experiments on four QA datasets show that DistilledPRAG outperforms baselines in accuracy and generalizes well on OOD data.

隐私计算RAGLoRA知识蒸馏

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。