arXiv:2606.25216cs.CRcs.CV2026-06被引 2

用加密数据直接做图像分类,保护隐私且精度损失极小。

Homomorphic Encryptions for Privacy Preserving Vision

论文配图:Homomorphic Encryptions for Privacy Preserving Vision
图 1 · 摘自论文原文
  • 改造卷积层以适配全同态加密,实现加密图像推理
  • 在多个数据集上保持接近原始模型的分类准确率
  • 支持彩色图像与多层卷积,适合隐私敏感场景

法律限制使机构难以共享医疗、金融等敏感数据,阻碍了对第三方云机器学习服务的使用。本文旨在通过仅处理加密数据的方式,在计算机视觉任务中实现隐私保护推理。借助全同态加密技术,可在密文上直接执行加法和乘法运算。为将该技术应用于卷积神经网络(CNN),需改造传统卷积层以适配加密方案。我们采用 Microsoft SEAL 实现加密,并致力于构建能在加密输入上直接分类的 CNN 模型。目标是使加密模型的分类精度接近未加密训练的基准模型,同时最小化推理性能损耗。实验在 MNIST、Kuzushiji MNIST、Fashion-MNIST 与 CIFAR-10 等数据集上进行,结果表明分类准确率下降极小。此外,我们在 TenSEAL 基础上扩展支持彩色图像(多通道输入)、多层卷积及平均池化操作。

原文摘要 · Abstract (English)

Legal requirements might prevent organizations from sharing sensitive data like medical or financial details of consumers which prevents them from leveraging cloud based ML-as-a-service solutions provided by third party providers, which are quickly gaining popularity these days. In this project, we aim to perform inference tasks in Computer Vision in a privacy-preserving manner, i.e, by only looking at encrypted data. Recent advances in fully homomorphic encryption make this possible. A fully homomorphic encryption allows an arbitrary sequence of additive and multiplicative operations to be performed on encrypted data directly. Applying homomorphic encryptions to CNNs requires modifying the conventional CNN layers, so that they adhere to the encryption scheme. Our aim was to explore the best methods to create CNNs which can classify encrypted images directly. We used Microsoft SEAL for performing homomorphic encryption. The performance of these "encryption based CNNs" should be comparable with baseline accuracies of the same CNNs trained on unencrypted data, and the aim was to achieve as low of a hit on inference-time performance as possible. We successfully obtained minimal drop in classification accuracy for various datasets. We used MNIST as our baseline, which is popularly used in related research work and then explored more complex datasets like Kuzushiji MNIST, Fashion-MNIST and CIFAR-10 as a part of our contribution. Additionally, we also added support for more complex operations on top of TenSEAL, like processing colored images (multi-channel input), applying multiple convolutional layers and performing average pooling.

隐私计算加密推理卷积网络同态加密

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。