arXiv:2604.05077cs.LGcs.AI2026-04

针对金属3D打印缺陷检测,提出新型隐私保护图学习方法。

Feature-Aware Anisotropic Local Differential Privacy for Utility-Preserving Graph Representation Learning in Metal Additive Manufacturing

  • 用分层图注意力网络捕捉熔池的时空物理关联。
  • 根据特征重要性动态分配噪声,在ε=4时保留81.5%模型性能。
  • 适合需隐私保护的工业数据协作场景,如增材制造质量监控。

金属增材制造(AM)可生产关键部件,但可靠的质量保障依赖高保真传感器数据,其中包含专有工艺信息,限制了数据共享。现有缺陷检测模型通常将熔池观测视为独立样本,忽略了层间物理耦合。传统隐私保护技术(如局部差分隐私,LDP)因在所有特征维度均匀加噪,导致性能严重下降。为此,本文提出FI-LDP-HGAT框架,结合分层图注意力网络(HGAT)与特征重要性感知的非交互式异向高斯机制(FI-LDP)。该机制基于编码器生成的重要性先验,将隐私预算按特征重要性分配:关键热信号加噪少,冗余维度加噪多,同时满足形式化LDP约束。在定向能量沉积(DED)气孔数据集上的实验表明,当隐私预算ε=4时,模型实现81.5%的性能恢复;在严格隐私要求下(ε=2),缺陷召回率仍达0.762,优于经典机器学习、标准GNN及DP-SGD等方法。机制分析显示,特征重要性与噪声幅度呈强负相关(Spearman=-0.81),证实隐私-效用提升源于合理异向分配。

原文摘要 · Abstract (English)

Metal additive manufacturing (AM) enables the fabrication of safety-critical components, but reliable quality assurance depends on high-fidelity sensor streams containing proprietary process information, limiting collaborative data sharing. Existing defect-detection models typically treat melt-pool observations as independent samples, ignoring layer-wise physical couplings. Moreover, conventional privacy-preserving techniques, particularly Local Differential Privacy (LDP), lead to severe utility degradation because they inject uniform noise across all feature dimensions. To address these interrelated challenges, we propose FI-LDP-HGAT. This computational framework combines two methodological components: a stratified Hierarchical Graph Attention Network (HGAT) that captures spatial and thermal dependencies across scan tracks and deposited layers, and a feature-importance-aware anisotropic Gaussian mechanism (FI-LDP) for non-interactive feature privatization. Unlike isotropic LDP, FI-LDP redistributes the privacy budget across embedding coordinates using an encoder-derived importance prior, assigning lower noise to task-critical thermal signatures and higher noise to redundant dimensions while maintaining formal LDP guarantees. Experiments on a Directed Energy Deposition (DED) porosity dataset demonstrate that FI-LDP-HGAT achieves 81.5% utility recovery at a moderate privacy budget (epsilon = 4) and maintains defect recall of 0.762 under strict privacy (epsilon = 2), while outperforming classical ML, standard GNNs, and alternative privacy mechanisms, including DP-SGD across all evaluated metrics. Mechanistic analysis confirms a strong negative correlation (Spearman = -0.81) between feature importance and noise magnitude, providing interpretable evidence that the privacy-utility gains are driven by principled anisotropic allocation.

图神经网络隐私保护3D打印差分隐私

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。