arXiv:2603.22437cs.CRcs.LG2026-03

首例实现毫米波雷达端到端加密的系统,保障数据隐私同时保持高精度。

mmFHE: mmWave Sensing with End-to-End Fully Homomorphic Encryption

  • 用可组合的加密算子替代传统信号处理流程,全程在密文上运行。
  • 心率/呼吸率误差小于0.001 bpm,手势识别准确率99.7%(密文)
  • 适合医疗健康、智能家居等对隐私要求高的毫米波应用

我们提出mmFHE,首个支持端到端毫米波雷达感知的全同态加密系统。mmFHE在轻量级边缘设备上对原始距离谱进行加密,并在不受信任的云上完全以密文形式执行毫米波信号处理与机器学习推理。核心是一个包含七个可组合、数据无关的同态加密核的库,替代标准数字信号处理流程,采用固定算术电路。这些核可灵活组合成特定应用流水线。我们在两个典型任务上验证:生命体征监测与手势识别。我们形式化证明了该库构建的任意流水线具备两项密码学保证:输入隐私(云无法获取传感器数据信息)和数据无关性(无论处理何种数据,云上的执行轨迹均一致)。这两项保证有效抵御各类监督与非监督隐私攻击,包括重识别和数据相关隐私泄露。在三个公开雷达数据集(270个生命体征记录,600次手势试验)上的评估显示,加密引入的误差极小:心率/呼吸率平均绝对误差<10^-3 bpm(相比明文),手势识别准确率达84.5%(明文为84.7%),端到端云GPU延迟分别为103秒(10秒生命体征窗口)和37秒(3秒手势窗口)。结果表明,当前通用硬件已可实现隐私保护的端到端毫米波感知。

原文摘要 · Abstract (English)

We present mmFHE, the first system that enables fully homomorphic encryption (FHE) for end-to-end mmWave radar sensing. mmFHE encrypts raw range profiles on a lightweight edge device and executes the entire mmWave signal-processing and ML inference pipeline homomorphically on an untrusted cloud that operates exclusively on ciphertexts. At the core of mmFHE is a library of seven composable, data-oblivious FHE kernels that replace standard DSP routines with fixed arithmetic circuits. These kernels can be flexibly composed into different application-specific pipelines. We demonstrate this approach on two representative tasks: vital-sign monitoring and gesture recognition. We formally prove two cryptographic guarantees for any pipeline assembled from this library: input privacy, the cloud learns nothing about the sensor data; and data obliviousness, the execution trace is identical on the cloud regardless of the data being processed. These guarantees effectively neutralize various supervised and unsupervised privacy attacks on raw data, including re-identification and data-dependent privacy leakage. Evaluation on three public radar datasets (270 vital-sign recordings, 600 gesture trials) shows that encryption introduces negligible error: HR/RR MAE <10^-3 bpm versus plaintext, and 84.5% gesture accuracy (vs. 84.7% plaintext) with end-to-end cloud GPU latency of 103s for a 10s vital-sign window and 37s for a 3s gesture window. These results show that privacy-preserving end-to-end mmWave sensing is feasible on commodity hardware today.

毫米波雷达同态加密隐私计算边缘计算

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。