为中文医疗大模型训练与部署设计隐私保护数据处理框架
DPF-CM: A Data Processing Framework with Privacy-Preserving Vector Databases for Chinese Medical LLMs Training and Deployment
- 构建链式上下文学习生成指令,提升数据指令化程度
- 用多奖励模型平均过滤偏好数据,降低噪声样本影响
- 通过四阶段向量库设计,减少推理时的隐私泄露风险
当前开源中文医疗大模型训练流程多聚焦于优化训练方法以提升模型性能,却忽视了训练数据处理的系统性探索。为此,我们提出 DPF-CM:一个面向中文医疗大模型训练与部署的完整数据处理框架。该框架包含两个核心模块:第一,面向训练的数据处理流水线,引入链式示例上下文学习策略生成问题导向指令,缓解指令内容缺失问题;采用基于集成的偏好数据过滤机制,通过多个奖励模型的平均来抑制噪声样本。第二,面向部署的隐私保护模块,提出隐私保护向量数据库(PPVD),包含模型记忆搜索、高风险数据库构建、安全数据库构建及匹配替换四个关键阶段,协同降低推理过程中的隐私泄露风险。实验表明,DPF-CM 显著提升模型准确率,使所训练的中文医疗大模型在开源同类模型中达到领先水平,同时将训练数据隐私泄露降低 27%。
原文摘要 · Abstract (English)
Current open-source training pipelines for Chinese medical language models predominantly emphasize optimizing training methodologies to enhance the performance of large language models (LLMs), yet lack comprehensive exploration into training data processing. To address this gap, we propose DPF-CM, a holistic Data Processing Framework for Chinese Medical LLMs training and deployment. DPF-CM comprises two core modules. The first module is a data processing pipeline tailored for model training. Beyond standard data processing operations, we (1) introduce a chained examples context-learning strategy to generate question-oriented instructions to mitigate the lack of instruction content, and (2) implement an ensemble-based filtering mechanism for preference data curation that averages multiple reward models to suppress noisy samples. The second module focuses on privacy preservation during model deployment. To prevent privacy risks from the inadvertent exposure of training data, we propose a Privacy Preserving Vector Database (PPVD) approach, which involves model memory search, high-risk database construction, secure database construction, and match-and-replace, four key stages to minimize privacy leakage during inference collectively. Experimental results show that DPF-CM significantly improves model accuracy, enabling our trained Chinese medical LLM to achieve state-of-the-art performance among open-source counterparts. Moreover, the framework reduces training data privacy leakage by 27%.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。