arXiv:2605.08152cs.DCcs.AI2026-05

用零知识证明保护联邦学习,防攻击还高效。

Privacy-Preserving Federated Learning: Integrating Zero-Knowledge Proofs in Scalable Distributed Architectures

  • 用零知识证明验证节点计算,不看原始梯度也能防作弊。
  • 在1000个节点上仍保持94.2%准确率,抗攻击能力强。
  • 适合需要隐私安全的分布式AI部署场景。

人工智能与分布式系统结合催生了联邦学习(FL),可在不暴露本地数据的前提下实现分布式模型训练。随着组织间数据孤岛增多,在高度分布的边缘网络中部署复杂机器学习模型成为关键基础设施挑战。标准FL存在对抗性梯度更新和聚合层计算瓶颈等严重漏洞。本文提出一种端到端分布式架构,通过先进密码学验证与优化的大数据处理框架强化FL流程。引入零知识证明(ZKP)封装器,在全局聚合前对节点计算进行密码学验证,无需查看原始梯度即可消除模型投毒攻击。同时,将机器学习损失函数转化为适用于简洁验证的秩-1约束系统(R1CS)。实验表明,该混合架构在1000个并行节点下仍能保持94.2%的准确率,有效兼顾严格的密码学安全与高性能分布式AI。

原文摘要 · Abstract (English)

The intersection of Artificial Intelligence (AI) and distributed systems has given rise to Federated Learning (FL), a paradigm that enables decentralized model training without compromising local data privacy. As organizational data silos grow, deploying complex machine learning models across highly distributed edge networks becomes a critical infrastructural challenge. Standard FL implementations suffer from severe vulnerabilities related to adversarial gradient updates and computational bottlenecks at the aggregation layer. This paper presents a novel, end-to-end distributed architecture that hardens FL pipelines using advanced cryptographic verification and optimized big data processing frameworks. We introduce a Zero-Knowledge Proof (ZKP) wrapper that cryptographically validates node computations before global aggregation, neutralizing model poisoning attacks without inspecting raw gradients. Additionally, we evaluate the system's performance using extreme gradient boosting models optimized for distributed edge execution. We formalize the mathematical transformation of the machine learning loss functions into Rank-1 Constraint Systems (R1CS) suitable for succinct verification. Extensive experimental results demonstrate that our hybrid architecture achieves a 94.2\% accuracy retention under adversarial conditions while maintaining scalable throughput across 1,000 parallel distributed nodes, effectively bridging the gap between rigorous cryptographic security and high-performance distributed AI.

联邦学习零知识证明隐私安全分布式训练

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。