arXiv:2603.26781cs.CRcs.LG2026-03

用加密神经网络实现高效安全计算,1秒内完成图像分类

Efficient Encrypted Computation in Convolutional Spiking Neural Networks with TFHE

  • 基于TFHE和脉冲神经网络,实现加密状态下任意深度的神经网络推理
  • 在MNIST和FashionMNIST上损失低于3%,单次预测耗时不足1秒
  • 适合医疗图像等隐私敏感场景,支持参数优化与实际应用

随着人工智能技术的发展,数据隐私问题日益突出,推动了加密计算领域的前沿研究。全同态加密(FHE)是保护隐私计算的关键技术,但其在处理连续非多项式函数时受限,因其仅支持整数上的加法与乘法。脉冲神经网络(SNN)以离散脉冲信号为特征,天然契合FHE特性。本文提出FHE-DiCSNN框架,基于TFHE方案,利用SNN的离散性实现安全高效的计算。通过引入自举技术,成功在密文上实现漏电积分-放电(LIF)神经元模型,支持任意深度的SNN。该框架可拓展至其他脉冲神经元模型,为同态评估SNN提供新思路。同时,借鉴卷积神经网络(CNN)的卷积思想提升准确率,并降低随机编码带来的模拟时间开销。并行计算进一步加速自举操作。在MNIST和FashionMNIST数据集上的实验表明,与明文模型相比,损失均低于3%,且每次预测耗时低于1秒。我们还将模型应用于真实医学图像分类任务,分析参数优化与选择策略。

原文摘要 · Abstract (English)

With the rapid advancement of AI technology, we have seen more and more concerns on data privacy, leading to some cutting-edge research on machine learning with encrypted computation. Fully Homomorphic Encryption (FHE) is a crucial technology for privacy-preserving computation, while it struggles with continuous non-polynomial functions, as it operates on discrete integers and supports only addition and multiplication. Spiking Neural Networks (SNNs), which use discrete spike signals, naturally complement FHE's characteristics. In this paper, we introduce FHE-DiCSNN, a framework built on the TFHE scheme, utilizing the discrete nature of SNNs for secure and efficient computations. By leveraging bootstrapping techniques, we successfully implement Leaky Integrate-and-Fire (LIF) neuron models on ciphertexts, allowing SNNs of arbitrary depth. Our framework is adaptable to other spiking neuron models, offering a novel approach to homomorphic evaluation of SNNs. Additionally, we integrate convolutional methods inspired by CNNs to enhance accuracy and reduce the simulation time associated with random encoding. Parallel computation techniques further accelerate bootstrapping operations. Experimental results on the MNIST and FashionMNIST datasets validate the effectiveness of FHE-DiCSNN, with a loss of less than 3\% compared to plaintext, respectively, and computation times of under 1 second per prediction. We also apply the model into real medical image classification problems and analyze the parameter optimization and selection.

加密计算脉冲神经网络隐私保护TFHE

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。