提出可验证的联邦学习框架,兼顾隐私、抗攻击与高效计算。
PRoVeFL: Private Robust and Verifiable Aggregation in Federated Learning

- 用多服务器+全同态加密分片上传模型,实现隐私保护
- 支持多种抗中毒算法,且验证开销极低
- 相比前作提速100倍,适合大规模隐私敏感场景
联邦学习允许多客户端协作训练模型并保持数据本地化,提升用户隐私。然而传统框架依赖中心化聚合服务器,假设客户端为诚实但好奇,易受服务器端推断和客户端投毒攻击。尽管已有工作探索安全且抗拜占庭的联邦学习协议,但存在隐私、完整性与可验证性之间的根本权衡,且因大量使用密码学原语导致计算通信开销大。本文提出PRoVeFL——一种新型模块化联邦学习框架,具备隐私保护、拜占庭鲁棒性与可验证聚合能力。该框架采用多服务器架构,结合多密钥全同态加密,每个客户端加密其本地模型更新并分发至所有服务器。通过在严格隐私约束下将部分密文运算卸载至明文域,实现复杂统计聚合规则的高效计算。PRoVeFL兼容多种先进抗拜占庭聚合算法(如Krum、Trimmed Mean、FLTrust、范数裁剪、MESAS等),并引入最小信任需求下的可验证机制。在不同设置下评估表明其具有良好的可扩展性。相较于基于分布式信任的Prio与ELSA,PRoVeFL在运行时间上分别提升最高达100倍和10倍,同时保持相当的安全性。
原文摘要 · Abstract (English)
Federated Learning (FL) enables multiple clients to collaboratively train machine learning models while retaining data locality, thereby enhancing user privacy. However, traditional FL frameworks rely on a centralized aggregation server and assume honest-but-curious clients, making them susceptible to both server-side inference and client-side poisoning attacks. Although recent work has explored secure and Byzantine-resilient FL protocols, they face a fundamental trade-off among privacy, integrity, and verifiability, and incur substantial computational and communication overhead due to the heavy use of cryptographic primitives. In this work, we propose PRoVeFL-a novel, modular FL framework that is Privacy-preserving, Byzantine-Robust, and ensures Verifiable aggregation. PRoVeFL employs multiple servers leveraging multi-key fully homomorphic encryption. Each client encrypts its local model updates and distributes encrypted shares to all servers. This design enables a hybrid computation model in which ciphertext operations are carefully offloaded to the plaintext domain under strict privacy constraints to efficiently evaluate complex statistical aggregation rules. PRoVeFL is compatible with a wide range of state-of-the-art Byzantine-robust aggregation algorithms (e.g., Krum, Trimmed Mean, FLTrust, norm clipping, MESAS, and more) and further enhances them with verifiability mechanisms that require minimal trust in at least one honest server. We evaluate it across different settings and demonstrate its scalability with varying numbers of parameters and participants. PRoVeFL improves runtime over the prior works, Prio and ELSA, based on distributed trust with comparable security guarantees, up to 100x and 10x, respectively.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。