arXiv:2601.22589cs.LGcs.AI2026-01被引 3

提出低开销的联邦遗忘框架,解决数据删除后模型仍存记忆的问题。

FedCARE: Federated Unlearning with Conflict-Aware Projection and Relearning-Resistant Recovery

  • 通过梯度上升和无数据反演生成类级代理,实现高效遗忘。
  • 在多个数据集上验证,遗忘效果好且模型性能下降少。
  • 适合需合规删除数据的联邦学习场景,如医疗、金融

联邦学习(FL)可在不集中原始数据的前提下协同训练模型,但隐私法规(如被遗忘权)要求系统在请求时移除此前训练数据的影响。从头重新训练代价过高,促使联邦遗忘(FU)研究。然而现有方法存在遗忘开销大、知识纠缠导致性能下降、恢复阶段意外重学等问题。本文提出FedCARE,一个统一且低开销的联邦遗忘框架,支持冲突感知遗忘与抗重学恢复。当目标数据本地可用时,采用梯度上升实现高效遗忘;利用无数据模型反演构建共享知识的类级代理。基于此,集成伪样本生成器、冲突感知投影梯度上升以保留性能,以及抑制回退至遗忘前模型的恢复策略。FedCARE支持客户端、实例级与类别级遗忘,开销小。在多种数据集与模型架构下,无论独立同分布(IID)或非独立同分布(non-IID)设置中,均优于当前最优基线,实现有效遗忘、更好性能保持及更低重学风险。

原文摘要 · Abstract (English)

Federated learning (FL) enables collaborative model training without centralizing raw data, but privacy regulations such as the right to be forgotten require FL systems to remove the influence of previously used training data upon request. Retraining a federated model from scratch is prohibitively expensive, motivating federated unlearning (FU). However, existing FU methods suffer from high unlearning overhead, utility degradation caused by entangled knowledge, and unintended relearning during post-unlearning recovery. In this paper, we propose FedCARE, a unified and low overhead FU framework that enables conflict-aware unlearning and relearning-resistant recovery. FedCARE leverages gradient ascent for efficient forgetting when target data are locally available and employs data free model inversion to construct class level proxies of shared knowledge. Based on these insights, FedCARE integrates a pseudo-sample generator, conflict-aware projected gradient ascent for utility preserving unlearning, and a recovery strategy that suppresses rollback toward the pre-unlearning model. FedCARE supports client, instance, and class level unlearning with modest overhead. Extensive experiments on multiple datasets and model architectures under both IID and non-IID settings show that FedCARE achieves effective forgetting, improved utility retention, and reduced relearning risk compared to state of the art FU baselines.

联邦学习数据遗忘隐私保护

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。