arXiv:2512.10348cs.AI2025-12AAAI

提出新方法实现垂直联邦学习中的快速删除,保护隐私同时保持模型性能。

REMISVFU: Vertical Federated Unlearning via Representation Misdirection for Intermediate Output Feature

  • 通过特征输出混淆实现客户端级遗忘,不依赖原始数据。
  • 删除请求后攻击成功率降至自然水平,准确率仅降2.5个百分点。
  • 适用于需合规删除的医疗、金融等数据分片场景。

GDPR等数据保护法规赋予联邦学习参与者被遗忘的权利。联邦去学习因此成为研究前沿,旨在移除特定参与方对模型的贡献,同时保留其余参与方的模型效用。然而,现有方法多聚焦于按样本划分数据的横向联邦学习(HFL),而垂直联邦学习(VFL)允许拥有互补特征空间的机构在不共享原始数据的前提下联合建模。这种特征分割架构使面向HFL的去学习方法失效。本文提出REMISVFU,一种即插即用的表示误导框架,支持在分割式VFL系统中实现快速客户端级去学习。当收到删除请求时,遗忘方将其编码器输出坍缩至单位球面上的随机锚点,切断其特征与全局模型间的统计关联。为保持其余方的效用,服务器联合优化保留损失与遗忘损失,通过正交投影对齐梯度以消除破坏性干扰。在公开基准上的评估表明,REMISVFU将后门攻击成功率抑制到自然类别先验水平,且仅牺牲约2.5%的干净准确率,优于现有最先进基线。

原文摘要 · Abstract (English)

Data-protection regulations such as the GDPR grant every participant in a federated system a right to be forgotten. Federated unlearning has therefore emerged as a research frontier, aiming to remove a specific party's contribution from the learned model while preserving the utility of the remaining parties. However, most unlearning techniques focus on Horizontal Federated Learning (HFL), where data are partitioned by samples. In contrast, Vertical Federated Learning (VFL) allows organizations that possess complementary feature spaces to train a joint model without sharing raw data. The resulting feature-partitioned architecture renders HFL-oriented unlearning methods ineffective. In this paper, we propose REMISVFU, a plug-and-play representation misdirection framework that enables fast, client-level unlearning in splitVFL systems. When a deletion request arrives, the forgetting party collapses its encoder output to a randomly sampled anchor on the unit sphere, severing the statistical link between its features and the global model. To maintain utility for the remaining parties, the server jointly optimizes a retention loss and a forgetting loss, aligning their gradients via orthogonal projection to eliminate destructive interference. Evaluations on public benchmarks show that REMISVFU suppresses back-door attack success to the natural class-prior level and sacrifices only about 2.5% points of clean accuracy, outperforming state-of-the-art baselines.

联邦学习隐私保护去学习特征分割

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。