Abstract
Federated Learning (FL) is a distributed machine learning framework that allows for model training across multiple clients without requiring access to their local data. However, FL poses some risks, for example, curious clients might conduct inference attacks (e.g., membership inference attacks, model-inversion attacks) to extract sensitive information from other participants. Existing solutions typically fail to strike a good balance between performance and privacy, or are only applicable to specific FL scenarios. To address these challenges, we propose a universal and efficient privacy-preserving FL framework based on matrix theory. Specifically, we design the Improved Extended Hill Cryptosystem (IEHC), which efficiently encrypts model parameters while supporting the secure ReLU function. To accommodate different training tasks, we design the Secure Loss Function Computation (SLFC) protocol, which computes derivatives of various loss functions while maintaining data privacy of both client and server. And we implement SLFC specifically for three classic loss functions, including MSE, Cross Entropy, and L1. Extensive experimental results demonstrate that our approach robustly defends against various inference attacks. Furthermore, model training experiments conducted in various FL scenarios indicate that our method shows significant advantages across most metrics.
| Original language | English |
|---|---|
| Pages (from-to) | 14333-14347 |
| Number of pages | 15 |
| Journal | IEEE Internet of Things Journal |
| Volume | 12 |
| Issue number | 10 |
| Early online date | 6 Jan 2025 |
| DOIs | |
| Publication status | Published - 15 May 2025 |
User-Defined Keywords
- Federated Learning (FL)
- Inference Attacks
- Matrix Theory
- Privacy-Preservation
Fingerprint
Dive into the research topics of 'UEFL: Universal and Efficient Privacy-Preserving Federated Learning'. Together they form a unique fingerprint.Cite this
- APA
- Author
- BIBTEX
- Harvard
- Standard
- RIS
- Vancouver