arXiv:2608.14693cs.CLcs.AI2026-08

用自然语言规则+指令微调模型实现可解释的自动文本脱敏

Domain Agnostic Text Redaction from Natural Language Rules using Instruction Tuning

论文配图:Domain Agnostic Text Redaction from Natural Language Rules using Instruction Tuning
图 1 · 摘自论文原文
  • 用户用自然语言定义敏感内容规则,由大模型辅助生成并用于微调小模型
  • 红化准确率高,重建失败率也高,说明脱敏效果强
  • 每步脱敏都有自然语言解释,适合法律、医疗等需审计的场景

随着个人和企业通信的数字化加剧,文本数据的自动净化已成为数据隐私与合规框架的关键组成部分。传统文本净化方法主要适用于结构化敏感信息(如个人身份信息,PII),但缺乏透明的脱敏依据,难以审计。本文提出一种可解释的、领域无关的文本脱敏方案,利用自然语言规则,通过指令微调的语言模型识别并脱敏非结构化文档中的敏感信息。用户可自定义任意敏感内容,无论是结构化的(如PII)还是非结构化的(如条款与条件)。通用大模型从用户定义中生成或扩充这些规则,并用于指令微调小型语言模型,使其在处理文档时分步推理规则,识别并脱敏对应内容,同时提供每处脱敏的自然语言解释,便于人工审核与审计。采用基于重构的度量评估脱敏覆盖率,结果显示重建错误率高、脱敏精度高,适用于法律取证、医疗记录和企业信息治理等关键场景。

原文摘要 · Abstract (English)

With the increasing digitization of personal and corporate communication, the automatic sanitization of textual data has become a crucial component of data privacy and compliance frameworks. Traditional text sanitization solutions are majorly suitable for obscuring sensitive data with standard structure such as Personal Identifiable Information (PII). These solutions do not provide transparent justification for their redaction, which makes it difficult to audit them. This paper introduces an explainable, domain-agnostic text redaction solution that uses natural language rules of redaction, applied via an instruction-tuned language model, to identify and redact sensitive information in unstructured documents. Unlike traditional text sanitization, this method enables a user to conveniently define any sensitive information; which may be structured (e.g.\ PII) or unstructured (e.g.\ legal terms and conditions) in natural language. A general-purpose LLM generates or augments these natural language rules of redaction from the user's definition, which are then used to instruction-fine-tune a smaller language model that reasons the rules step-by-step over any given document to identify and redact the corresponding sensitive content, while providing transparent justifications for each redaction and highlighting the specific rule that triggered the decision. This explanation is generated in natural language to support human reviewers and auditors in understanding why specific content was redacted. A reconstruction-based metric is used to estimate the probability of recovering redacted information from the sanitized document, quantifying redaction coverage. The solution shows high reconstruction error and high redaction precision, making it suitable for automated text sanitization in critical applications such as legal discovery, medical documentation, and corporate information governance.

文本脱敏可解释性指令微调

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。