为轻量级联邦学习设计了抗丢包和对抗的高效安全聚合方案。
Information-Theoretically Secure Aggregation for Lightweight Federated Learning: Resilient to Dropouts and Adversaries

- 通过单轮安全乘法计算多数投票多项式,实现信息论安全
- 通信量降低99.5%,延迟减少85.7%,支持高可扩展性
- 兼容签名梯度方法,对丢包和恶意节点均有鲁棒性
设备端联邦学习(FL)可在资源受限设备(如智能手机、物联网节点)上实现隐私保护与个性化模型训练。为降低通信开销,基于符号的方法(如signSGD)仅传输一比特梯度。然而,暴露梯度符号易受推断攻击,现有安全聚合方案往往不兼容此类方法或带来显著计算与通信开销。本文提出一种面向签名型联邦学习的轻量级、信息论安全聚合框架。该框架通过单轮安全乘法安全计算多数投票(MV)多项式,在诚实多数假设下实现端到端信息论安全,仅向服务器披露最终聚合符号。为提升效率与可扩展性,引入两项关键技术:首先,逆形式指数约减使有效MV多项式次数减半,降低通信与计算成本;其次,提出单轮安全乘法,实现线性离线复杂度与存储,仅需一次在线通信。两者结合使在线通信量最高降低99.5%,延迟最高减少85.7%。此外,通过利用固有MDS码解码机制,框架对丢包和恶意行为均具鲁棒性,准确率分别提升最高20.65%与10.74%。整体上,该框架为大规模、低延迟、信息论安全的签名型联邦学习聚合奠定了实用基础。
原文摘要 · Abstract (English)
On-device federated learning (FL) enables privacy-preserving and personalized model training on resource-constrained devices such as smartphones and IoT nodes. To reduce communication cost, sign-based methods (e.g., signSGD) transmit one-bit gradients. However, exposing gradient signs makes them vulnerable to inference attacks, while existing secure aggregation schemes are often incompatible with such methods or incur significant computational and communication overhead. We propose a lightweight and information-theoretically secure aggregation framework tailored for sign-based FL. The framework securely computes the majority vote (MV) polynomial through single-round secure multiplication, ensuring end-to-end information-theoretic security under the honest-majority assumption while revealing only the final aggregated sign to the server. To enhance efficiency and scalability, we introduce two key techniques. First, inverse-form exponent reduction halves the effective MV polynomial degree, reducing both communication and computation costs. Second, we propose single-round secure multiplication, achieving linear offline complexity and storage with only a single online communication. Together, these techniques reduce online communication by up to 99.5% and latency by up to 85.7% compared to conventional approaches. Also, by leveraging inherent MDS-code-based decoding, the framework achieves robustness against both dropouts and adversarial behaviors, yielding accuracy gains of up to 20.65% and 10.74%, respectively. Overall, the proposed framework establishes a practical foundation for large-scale, low-latency, and information-theoretically secure aggregation in sign-based FL.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。