arXiv:2607.23029cs.LGcs.AI2026-07

用平均场博弈统一建模联邦学习隐私,实现可扩展的个性化保护。

Multi-Agent Privacy Game in Federated Learning: A Unified Mean-Field View

论文配图:Multi-Agent Privacy Game in Federated Learning: A Unified Mean-Field View
图 1 · 摘自论文原文
  • 将每个客户端的隐私预算设为策略,通过群体均值交互,构建平均场隐私博弈。
  • 在任意多客户端下保持可计算均衡,隐私泄露随轮次指数衰减。
  • 支持不同用户个性化隐私需求,实验显示比固定策略更优。

联邦学习允许分布式客户端协作训练模型而不集中数据,但共享模型更新可能泄露本地数据信息,隐私问题持续存在。现有方法或对客户端更新注入校准噪声,限制组合隐私保证;或将客户端隐私选择建模为多智能体博弈,但当客户端数量增长时纳什均衡难以求解。本文提出一种平均场隐私博弈框架:每个客户端自主选择隐私预算,仅通过单一均值场统计量与整体交互。该极限情形下,无论客户端数量多少,均可获得可计算均衡,支持客户端偏好异质性,并通过对数-索博列夫收缩实现指数衰减的隐私保证。该框架在同质情况下退化为熵基线,在有限群体下恢复多智能体博弈。在二次回归、逻辑回归和MNIST上的实验表明,所提方法在隐私-效用权衡上达到熵基线水平,同时提供同质基线无法表达的个性化隐私保障。

原文摘要 · Abstract (English)

Federated learning enables collaborative model training across distributed clients without centralising their data, yet privacy remains a persistent concern because the shared model updates can leak information about local datasets. Existing privacy-preserving methods either inject calibrated noise into client updates, limiting their composition guarantees, or formulate client privacy choices as a multi-agent game whose Nash equilibrium becomes intractable as the number of clients grows. We bridge these two lines of work by formulating privacy-preserving federated learning as a mean-field privacy game: each client strategically chooses its own privacy budget while interacting with the population only through a single mean-field statistic. The mean-field limit yields a tractable equilibrium for arbitrarily many clients, accommodates heterogeneous client preferences, and inherits an exponentially decaying privacy guarantee through a log-Sobolev contraction. The framework recovers the entropic privacy baseline as the homogeneous special case and the multi-agent privacy game as the finite-population case. Experiments on quadratic regression, logistic regression, and MNIST demonstrate that the proposed framework attains the privacy-utility trade-off of the entropic baseline while delivering a personalized privacy guarantee that the homogeneous baseline cannot express.

联邦学习隐私保护平均场博弈

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。