arXiv:2607.22953cs.AIcs.CR2026-07

用户数据只分享必要部分,防止过度泄露。

Share No More Than the Request Requires: Federated Disclosure for Perspective-Aware AI

  • 用时间知识图谱构建用户身份模型,支持安全共享。
  • 响应仅包含请求所需信息,杜绝多余数据暴露。
  • 适合关注隐私保护与合规性的企业或研究者。

现代AI系统带来大规模监控、权力集中和用户自主权丧失等社会风险,质疑第三方集中掌控用户数据的模式。用户需要一个主权系统,能安全拥有、管理并披露个人上下文,同时符合严格监管领域对溯源性、可解释性和政策合规的要求。视角感知型AI通过将用户聚合的个人数据转化为结构化身份模型——即时间知识图谱‘Chronicle’——来应对这一挑战。Chronicle支持在联邦网络中安全披露上下文:持有者可提供可查询、授权的视图,供第三方代理访问,无需集中化数据。本文探讨跨域最小必要披露问题:当请求方代理查询Chronicle时,如何限制响应内容,仅释放请求方关系、声明目的和具体任务所需的最小信息?我们提出‘溯源保持的Chronicle’(PPC)协议,将每个持有者的Chronicle编译为紧凑的‘授权证据子图’,核心规则为‘不分享超过请求所需的内容’。持有者保持本地主权;访问控制器基于关系感知生成视图,覆盖领域专家本体;采用两阶段流程,先返回带溯源的文本,经持有者明确批准后才释放原始数据。本文定义问题,分析区块链、点对点及持有者主权设计的不足,建立核心概念,并描绘了带明确威胁模型的协议框架。

原文摘要 · Abstract (English)

Modern AI systems bring societal risks such as mass surveillance, extreme concentrations of power, and loss of user autonomy---calling into question a model where third-parties collect and control massive amounts of user data. Users require a sovereign system to securely own, govern, and disclose their context while remaining compliant across regulated domains with strict provenance, interpretability, and policy adherence. Perspective-aware AI approaches this by transforming a user's aggregated personal data into a structured identity model called a \emph{Chronicle}: a temporal knowledge graph that represents and grows with the user. Chronicles support the secure disclosure of context across federated networks. A Chronicle holder may expose a queryable, authorized view that a third-party agent may consult without centralizing anyone's data. This paper explores the problem of minimum-necessary disclosure across domain boundaries: when a requester's agent queries a Chronicle, how can the system constrain its response to release only what the requester's relationship, stated purpose, and specific task require? We propose \textbf{Provenance Preserving Chronicles} (PPC), a federated protocol that compiles each holder's Chronicle into a compact \emph{authorized evidence subgraph} governed by one rule: \emph{share no more than the request requires}. Holders keep local sovereignty; an access controller projects relationship-aware views over domain-expert ontologies; and a two-phase flow returns provenance-linked text first, releasing raw artifacts only after explicit holder approval. We frame the problem, map gaps in blockchain, P2P, and holder-sovereign designs, define the core constructs, and sketch the protocol with an explicit threat model.

联邦学习隐私保护数据主权知识图谱

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。