arXiv:2601.11219cs.LGcs.AI2026-01被引 2

针对异构客户端的隐私微调,提出分离共享与私有更新的新框架。

SDFLoRA: Selective Decoupled Federated LoRA for Privacy-preserving Fine-tuning with Heterogeneous Clients

  • 将客户端更新分解为可共享和本地私有两部分,分别处理
  • 在多个基准上优于基线方法,实现更好的隐私与性能平衡
  • 适合资源受限且数据分布差异大的联邦学习场景

大型语言模型的联邦学习因能保护隐私而受到关注,参数高效方法如低秩适应(LoRA)被广泛用于降低通信与内存开销。然而实际部署中常存在秩异构与数据异构:客户端使用不同的低秩预算和数据分布,直接聚合LoRA更新会导致偏差和不稳定。现有方法或强制统一秩,或把异构更新对齐到单一共享子空间,容易混入可迁移与客户端特有方向,损害个性化效果。尤其在差分隐私(DP)下,对结构混合的更新加噪会污染应保持本地的方向,造成不必要的性能损失。为此,我们提出结构感知的可选解耦联邦LoRA(SDFLoRA),将每个客户端更新解耦为可聚合的共享成分与保留客户端特异性语义的私有成分。仅共享成分参与子空间对齐,私有成分本地保留不通信,使训练支持差分隐私并稳定应对秩异构。通过仅在聚合的共享更新中注入噪声,避免对本地方向加噪,提升隐私-效用权衡。多基准实验表明,SDFLoRA优于联邦LoRA基线,达成强隐私-效用平衡。

原文摘要 · Abstract (English)

Federated learning (FL) for large language models (LLMs) has attracted increasing attention as a privacy-preserving approach for adapting models over distributed data, where parameter-efficient methods such as Low-Rank Adaptation (LoRA) are widely adopted to reduce communication and memory costs. However, practical deployments often exhibit rank and data heterogeneity: clients operate under different low-rank budgets and data distributions, making direct aggregation of LoRA updates biased and unstable. Existing approaches either enforce a unified rank or align heterogeneous updates into a single shared subspace, which tends to mix transferable and client-specific directions and consequently undermines personalization. Moreover, under differential privacy (DP), perturbing such structurally mixed updates injects noise into directions that should remain purely local, leading to unnecessary utility degradation. To address these issues, we propose Selective Decoupled Federated LoRA (SDFLoRA), a structure-aware LoRA framework that decouples each client update into a shared component for aggregation and a private component that preserves client-specific semantics. Only the shared component participates in subspace alignment, while the private component remains local and uncommunicated, making the training DP-compatible and stabilizing aggregation under rank heterogeneity. By injecting noise only into the aggregated shareable update, this approach avoids perturbations to local directions and improves the utility-privacy trade-off. Experiments on multiple benchmarks demonstrate that SDFLoRA outperforms federated LoRA baselines and achieves a strong utility-privacy trade-off.

联邦学习隐私保护LoRA异构客户端

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。