提出FastFHE加速加密环境下CNN推理,显著降低延迟与资源消耗。
FastFHE: Packing-Scalable and Depthwise-Separable CNN Inference Over FHE
- 设计可扩展的密文数据打包方案,节省时间和存储
- 采用深度可分离卷积降低计算负载,提升效率
- 融合批量归一化与卷积层,不增加乘法深度
深度学习已广泛应用于多个领域,如何在加密环境中保障模型推理安全与样本隐私成为关键挑战。现有基于RNS-CKKS方案的方法普遍存在高延迟问题,限制了实际应用。当前加密推理面临三大瓶颈:卷积计算的时间与存储开销、大规模自举操作的耗时、电路乘法深度的消耗。为此,本文提出FastFHE机制,在保持高推理精度的同时加速全同态加密下的CNN推理。具体贡献包括:1)提出可扩展的密文数据打包方案,减少时间和存储占用;2)设计深度可分离卷积结构,降低卷积计算负载;3)提出批归一化点积融合矩阵,实现卷积层与归一化层合并,不引入额外乘法深度;4)采用低阶勒让德多项式近似SiLU激活函数,确保加密前后精度误差极小。通过多维度实验验证了方法的高效性与有效性。
原文摘要 · Abstract (English)
The deep learning (DL) has been penetrating daily life in many domains, how to keep the DL model inference secure and sample privacy in an encrypted environment has become an urgent and increasingly important issue for various security-critical applications. To date, several approaches have been proposed based on the Residue Number System variant of the Cheon-Kim-Kim-Song (RNS-CKKS) scheme. However, they all suffer from high latency, which severely limits the applications in real-world tasks. Currently, the research on encrypted inference in deep CNNs confronts three main bottlenecks: i) the time and storage costs of convolution calculation; ii) the time overhead of huge bootstrapping operations; and iii) the consumption of circuit multiplication depth. Towards these three challenges, we in this paper propose an efficient and effective mechanism FastFHE to accelerate the model inference while simultaneously retaining high inference accuracy over fully homomorphic encryption. Concretely, our work elaborates four unique novelties. First, we propose a new scalable ciphertext data-packing scheme to save the time and storage consumptions. Second, we work out a depthwise-separable convolution fashion to degrade the computation load of convolution calculation. Third, we figure out a BN dot-product fusion matrix to merge the ciphertext convolutional layer with the batch-normalization layer without incurring extra multiplicative depth. Last but not least, we adopt the low-degree Legendre polynomial to approximate the nonlinear smooth activation function SiLU under the guarantee of tiny accuracy error before and after encrypted inference. Finally, we execute multi-facet experiments to verify the efficiency and effectiveness of our proposed approach.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。