让医疗对话模型在保护隐私前提下学习医生问答,防止敏感信息泄露。
PrivMedChat: End-to-End Differentially Private RLHF for Medical Dialogue Systems
- 全链路引入差分隐私,训练各阶段均保护对话数据
- 无需医生标注,用过滤后非专家回复自动构建偏好对
- 兼顾效果、安全与隐私,适合医疗AI落地场景
大型语言模型在患者服务和临床决策支持中日益普及,但其医疗对话适配常依赖含敏感信息的医患对话数据。传统监督微调与基于人类反馈的强化学习(RLHF)可能放大记忆效应,导致成员推断攻击,暴露罕见训练样本细节。本文提出PrivMedChat(私密医疗对话)框架,实现医疗对话系统的端到端差分隐私强化学习(DP-RLHF)。该方法在每个涉及对话监督的训练阶段强制执行差分隐私,结合用于监督微调和偏好对奖励模型学习的DP-SGD,以及面向对齐的差分隐私感知策略优化。为避免昂贵的医生标注,提出无需标注的偏好构造策略,将医生回复与过滤后的非专家生成结果配对。我们在多个医疗对话任务上评估PrivMedChat,在一致的隐私会计下衡量其效用、安全性和隐私性,提供一条在保障正式隐私承诺的同时对齐医疗聊天机器人的实用路径。代码已开源:https://github.com/sudip-bhujel/privmedchat。
原文摘要 · Abstract (English)
Large language models are increasingly used for patient-facing medical assistance and clinical decision support, but adapting them to clinical dialogue often requires supervision derived from doctor-patient conversations that may contain sensitive information. Conventional supervised fine-tuning and reinforcement learning from human feedback (RLHF) can amplify memorization, enabling membership inference and disclosure of rare training-set details. We present PrivMedChat (Private Medical Chat), an end-to-end framework for differentially private RLHF (DP-RLHF) for medical dialogue systems. Our approach enforces differential privacy at each training stage that accesses dialogue-derived supervision, combining DP-SGD for supervised fine-tuning and reward model learning from preference pairs, and DP-aware policy optimization for alignment. To avoid costly clinician labeling, we introduce an annotation-free preference construction strategy that pairs physician responses with filtered non-expert generations. We evaluate PrivMedChat across medical dialogue tasks and assess utility, safety, and privacy under consistent privacy accounting, thereby providing a practical pathway to align medical chatbots while offering formal privacy guarantees. We open-source our code at https://github.com/sudip-bhujel/privmedchat.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。