arXiv:2603.04323cs.LGcs.CR2026-03

用拓扑特征替代梯度,兼顾隐私与性能。

PTOPOFL: Privacy-Preserving Personalised Federated Learning via Persistent Homology

  • 用持久同调生成48维拓扑特征,替代原始梯度通信。
  • 在医疗和极端非独立同分布场景下AUC达0.841和0.910,优于主流方法。
  • 拓扑聚合降低重建风险4.5倍,适合高隐私要求的分布式学习。

联邦学习面临两个结构性矛盾:梯度共享易引发数据重构攻击,而非独立同分布的客户端分布会降低聚合质量。本文提出PTOPOFL框架,通过持久同调(PH)生成的拓扑描述符替代梯度通信。客户端仅传输48维的PH特征向量——紧凑的形状摘要,其多对一结构使逆推在理论上不可行。服务器采用拓扑引导的个性化聚合:基于水街辛相似性对客户端聚类,簇内模型按拓扑加权,簇间融合全局共识。我们证明了一个信息压缩定理,在强凸损失函数下,PH描述符每样本泄露的互信息严格少于梯度;并建立水街辛加权聚合方案的线性收敛性,误差下限低于FedAvg。在8家医院(含2个对抗客户端)的非独立同分布医疗场景及10客户端病理基准测试中,PTOPOFL分别取得AUC 0.841和0.910,为当前最优,同时将重构风险降低4.5倍。代码与数据公开于https://github.com/MorillaLab/TopoFederatedL 及 https://doi.org/10.5281/zenodo.18827595。

原文摘要 · Abstract (English)

Federated learning (FL) faces two structural tensions: gradient sharing enables data-reconstruction attacks, while non-IID client distributions degrade aggregation quality. We introduce PTOPOFL, a framework that addresses both challenges simultaneously by replacing gradient communication with topological descriptors derived from persistent homology (PH). Clients transmit only 48-dimensional PH feature vectors-compact shape summaries whose many-to-one structure makes inversion provably ill-posed-rather than model gradients. The server performs topology-guided personalised aggregation: clients are clustered by Wasserstein similarity between their PH diagrams, intra-cluster models are topology-weighted,and clusters are blended with a global consensus. We prove an information-contraction theorem showing that PH descriptors leak strictly less mutual information per sample than gradients under strongly convex loss functions, and we establish linear convergence of the Wasserstein-weighted aggregation scheme with an error floor strictly smaller than FedAvg. Evaluated against FedAvg, FedProx, SCAFFOLD, and pFedMe on a non-IID healthcare scenario (8 hospitals, 2 adversarial) and a pathological benchmark (10 clients), PTOPOFL achieves AUC 0.841 and 0.910 respectively-the highest in both settings-while reducing reconstruction risk by a factor of 4.5 relative to gradient sharing. Code is publicly available at https://github.com/MorillaLab/TopoFederatedL and data at https://doi.org/10.5281/zenodo.18827595.

联邦学习隐私保护拓扑分析个性化

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。