用差分隐私生成私密的强化学习数据集,保护敏感信息同时保持数据可用性。
PrivORL: Differentially Private Synthetic Dataset for Offline Reinforcement Learning
- 基于扩散模型与扩散变换器,分别生成私密的单步转移和轨迹数据。
- 在5个敏感数据集上,合成数据的保真度与实用性均优于现有方法。
- 适合关注隐私保护的强化学习研究者,尤其用于医疗、自动驾驶等敏感场景。
近期,离线强化学习(Offline RL)成为主流范式。数据提供方共享预收集的数据集(以单步转移或轨迹序列形式),使强化学习模型可在不直接交互环境的情况下进行训练,显著减少环境交互成本,在导航等关键任务中表现优异。然而,离线数据集存在隐私泄露风险。为保护隐私,本文提出首个面向离线强化学习的差分隐私(DP)数据集生成方法PrivORL,采用扩散模型生成转移,扩散变换器生成轨迹,并通过差分隐私随机梯度下降(DP-SGD)在敏感数据上微调。此外,引入基于好奇心的预训练机制,利用好奇心模块反馈提升生成多样性,使合成数据更贴近真实分布。在5个敏感离线强化学习数据集上的实验表明,该方法在转移与轨迹合成中均实现更高的实用性和保真度。代码已开源。
原文摘要 · Abstract (English)
Recently, offline reinforcement learning (RL) has become a popular RL paradigm. In offline RL, data providers share pre-collected datasets -- either as individual transitions or sequences of transitions forming trajectories -- to enable the training of RL models (also called agents) without direct interaction with the environments. Offline RL saves interactions with environments compared to traditional RL, and has been effective in critical areas, such as navigation tasks. Meanwhile, concerns about privacy leakage from offline RL datasets have emerged. To safeguard private information in offline RL datasets, we propose the first differential privacy (DP) offline dataset synthesis method, PrivORL, which leverages a diffusion model and diffusion transformer to synthesize transitions and trajectories, respectively, under DP. The synthetic dataset can then be securely released for downstream analysis and research. PrivORL adopts the popular approach of pre-training a synthesizer on public datasets, and then fine-tuning on sensitive datasets using DP Stochastic Gradient Descent (DP-SGD). Additionally, PrivORL introduces curiosity-driven pre-training, which uses feedback from the curiosity module to diversify the synthetic dataset and thus can generate diverse synthetic transitions and trajectories that closely resemble the sensitive dataset. Extensive experiments on five sensitive offline RL datasets show that our method achieves better utility and fidelity in both DP transition and trajectory synthesis compared to baselines. The replication package is available at the GitHub repository.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。