arXiv:2604.12348cs.LG2026-04被引 2

提出首个兼顾高效、隐私与可验证的联邦遗忘框架

PrivEraserVerify: Efficient, Private, and Verifiable Federated Unlearning

  • 自适应检查点+分层差分隐私校准,快速精准移除用户影响
  • 相比重训练提速2-3倍,准确率损失更小,支持规模化验证
  • 适合需合规删除数据的医疗、金融等高隐私场景

联邦学习(FL)可在不共享原始数据的情况下协同训练模型,是隐私保护人工智能的可行路径。然而,模型可能仍会记忆参与者的敏感信息,违背“被遗忘权”。为此,联邦遗忘机制应运而生,用于移除离线客户端的贡献。现有方案存在局限:FedEraser提升效率但无隐私保护,FedRecovery保障差分隐私(DP)却降低准确率,VeriFi支持可验证性但引入开销且缺乏效率与隐私保证。本文提出统一框架PrivEraserVerify(PEV),集成效率、隐私与可验证性。PEV采用(i)自适应检查点保留关键历史更新以实现快速重建,(ii)分层差分隐私校准,选择性消除客户端影响并最小化准确率损失,(iii)指纹验证机制,使参与者可去中心化、非侵入式地确认遗忘操作。在图像、手写字符和医疗数据集上的实验表明,PEV比重训练快2至3倍,提供形式化的不可区分性保证,性能下降更少,并支持可扩展验证。据我们所知,PEV是首个同时实现效率、隐私与可验证性的联邦遗忘框架,推动联邦学习向实际部署与合规应用迈进。

原文摘要 · Abstract (English)

Federated learning (FL) enables collaborative model training without sharing raw data, offering a promising path toward privacy preserving artificial intelligence. However, FL models may still memorize sensitive information from participants, conflicting with the right to be forgotten (RTBF). To meet these requirements, federated unlearning has emerged as a mechanism to remove the contribution of departing clients. Existing solutions only partially address this challenge: FedEraser improves efficiency but lacks privacy protection, FedRecovery ensures differential privacy (DP) but degrades accuracy, and VeriFi enables verifiability but introduces overhead without efficiency or privacy guarantees. We present PrivEraserVerify (PEV), a unified framework that integrates efficiency, privacy, and verifiability into federated unlearning. PEV employs (i) adaptive checkpointing to retain critical historical updates for fast reconstruction, (ii) layer adaptive differentially private calibration to selectively remove client influence while minimizing accuracy loss, and (iii) fingerprint based verification, enabling participants to confirm unlearning in a decentralized and noninvasive manner. Experiments on image, handwritten character, and medical datasets show that PEV achieves up to 2 to 3 times faster unlearning than retraining, provides formal indistinguishability guarantees with reduced performance degradation, and supports scalable verification. To the best of our knowledge, PEV is the first framework to simultaneously deliver efficiency, privacy, and verifiability for federated unlearning, moving FL closer to practical and regulation compliant deployment.

联邦学习隐私保护遗忘机制差分隐私

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。