用零知识证明验证贷款公平性指标,保护数据隐私且可审计。
ZK-SR117: A Chunked Zero-Knowledge Attestation Design for Aggregated Fair-Lending Metrics, with a Control Mapping toward Full SR 11-7 Coverage
- 将数据分块构建零知识电路,逐块验证公平性统计量。
- 32768条真实房贷数据,证明误差小于0.0029,每块证明不到4秒。
- 支持多控制项验证,适合金融监管场景下的隐私保护审计。
在受监管的决策场景(如信用审批、反欺诈)中部署机器学习模型,需向审计方证明公平性与鲁棒性,同时不暴露模型权重或客户数据。本文针对美国银行监管标准SR 11-7和OCC 2011-12指引,提出一种分块零知识电路设计,用于验证聚合公平性指标——人口平等差距(demographic-parity gap)。基于2022年真实HMDA房贷数据的承诺批次,通过随机采样实现端到端验证:共32,768行数据,32个独立验证的zkSNARK证明,聚合结果与真实值偏差仅0.0029;每块证明耗时低于4秒。此外,在相同架构上扩展验证了10分箱的期望校准误差(ECE),所有32块均被验证,每块证明约14.7秒,验证结果与明文值相差0.00037。相较扁平求和电路(数千行即溢出)和树形归约电路(数值精确但编译不可行),分块设计是唯一可扩展至该规模的方案。发现并定位了一处真实数据质量问题(哨兵码异常值干扰证明与统计量),并通过发布预处理规范解决。提出从监管控制语言到零知识语句的完整映射(涵盖9个控制要素,涉及稳健性、校准、鲁棒性、漂移等),设计基于随机数的采样协议以抵御银行侧选择性提交,并定义部署威胁模型。两个控制项、一个模型类别、一个任务完成端到端演示;其余为未来工作范畴。
原文摘要 · Abstract (English)
Deploying ML models in regulated decision-making (credit underwriting, fraud detection, loan approval) requires demonstrating fairness and robustness to auditors without exposing model weights or customer data. We address this attestation problem for U.S. bank supervision under SR 11-7 and OCC 2011-12 guidance. We present a chunked zero-knowledge circuit design that attests an aggregated fairness statistic - the demographic-parity gap - on committed, nonce-sampled batches of real 2022 HMDA mortgage data, and demonstrate it end-to-end: 32,768 rows, 32 independently verified zkSNARK proofs, aggregated attested gap within 0.0029 of the true held-out value, per-chunk proving under 4 seconds. We also demonstrate extensibility by attesting a second control on the identical architecture - expected calibration error at 10 bins - with all 32 chunks verified, per-chunk proving at about 14.7 seconds, and attested ECE within 0.00037 of the plaintext value on the same committed rows. We compare this design against two alternatives - a flat summation circuit, which overflows past a few thousand rows, and a tree-reduction circuit, numerically exact but intractable to compile - and find the chunked design is the only one that reached this scale. We discovered and root-caused a genuine data-quality failure (a sentinel-code outlier distorting circuit proving and the fairness statistic itself) and resolved it with a published preprocessing specification. We also propose a fuller mapping from SR 11-7 and OCC 2011-12 control language to zero-knowledge statements (nine control elements spanning soundness, calibration, robustness, and drift), a nonce-based sampling protocol resisting bank-side cherry-picking, and a threat model for deployment, proposed as design work, not implemented results. Two controls, one model class, one task are demonstrated end-to-end; the rest is scoped and left as future work.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。