用同态加密训练模型,数据全程不暴露,隐私安全有保障。
Training Machine Learning Models on Encrypted Data: A Privacy-Preserving Framework using Homomorphic Encryption
- 采用CKKS同态加密实现加密数据上的近似计算。
- 加密训练的KNN和线性回归性能接近明文训练结果。
- 适合对数据隐私要求高的医疗、金融等场景应用。
机器学习依赖敏感数据进行决策,传统加密方法无法保护数据在处理过程中的隐私。同态加密允许在密文上直接计算,保持数据全程保密。本文提出一个基于CKKS方案的隐私保护框架,实现加密数据上的机器学习模型训练。实验验证了在加密环境下训练K-Nearest Neighbors(KNN)和线性回归模型的可行性,并评估了基础多层感知机(MLP)的加密推理性能。结果表明,加密训练的模型性能与明文训练模型相当,验证了该方法的有效性。但计算开销大、噪声管理难、非多项式操作支持有限等问题仍存。本工作为隐私保护机器学习在真实场景中的应用奠定基础,兼顾安全性与计算可行性。
原文摘要 · Abstract (English)
The use of Machine Learning (ML) for data-driven decision-making often relies on access to sensitive datasets, which introduces privacy challenges. Traditional encryption methods protect data at rest or in transit but fail to secure it during processing, exposing it to unauthorized access. Homomorphic encryption emerges as a transformative solution, enabling computations on encrypted data without decryption, thus preserving confidentiality throughout the ML pipeline. This paper addresses the challenge of training ML models on encrypted data while maintaining accuracy and efficiency by proposing a proof-of-concept for a privacy-preserving framework that leverages Cheon-Kim-Kim-Song (CKKS) for approximate real-number arithmetic. Also, it demonstrates the feasibility of training K-Nearest Neighbors (KNN) and linear regression models on encrypted data, and evaluates encrypted inference for a basic Multilayer Perceptron (MLP) architecture. Experimental results show that models trained under Homomorphic encryption achieve performance metrics comparable to plaintext-trained models, validating the approach. However, challenges such as computational overhead, noise management, and limited support for non-polynomial operations persist. This work lays the groundwork for broader adoption of privacy-preserving ML in real-world applications, balancing security with computational feasibility.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。