首页|期刊导航|密码学报(中英文)|机器学习中核函数的隐私保护计算方法及应用

机器学习中核函数的隐私保护计算方法及应用OA

Privacy-Preserving Kernel Function Evaluation in Machine Learning and Its Application

中文摘要英文摘要

核函数通过量化跨域样本间的相似性,将数据映射至高维空间以解决线性不可分问题,但其在传统明文上计算方式涉及多方数据交互,存在隐私泄露风险.本文针对该问题,提出半诚实模型下的隐私保护计算核函数框架.首先基于同态加密与随机扰乱因子设计了三个交互式子协议,包括安全内积计算、安全幂函数计算与安全欧氏距离计算协议;通过将明文空间划分为正负数同余类并引入浮点数缩放因子,解决了传统加密算法在真实数据集上的兼容性问题;构建了基于交互式协议的非线性运算框架,在仅依赖加性同态加密的条件下,结合泰勒多项式逼近技术,通过两方计算与随机扰动技术实现了复杂核函数的安全计算,在单一密码系统内支持线性核函数、多项式核函数与高斯核函数;分析了方案的正确性、安全性、计算复杂性并说明了该方案的使用场景,利用公开数据集验证了此方案.实验结果表明,该方案在保证核函数模型精度的同时,有效实现了隐私保护目标,具备计算复杂度低与时间开销少的优势.

The kernel function maps data into a higher-dimensional space to address linear insepara-bility by quantifying similarity between cross-domain samples.However,its conventional computation on plaintext involving multi-party data interaction poses significant privacy leakage risks.This study proposes a privacy-preserving kernel function computation framework under the semi-honest model.First,three interactive sub-protocols are designed based on Paillier homomorphic encryption and ran-dom perturbation factors:secure inner product computation,secure power function computation,and secure Euclidean distance computation.By partitioning the plaintext space into congruence classes of positive/negative numbers and introducing floating-point scaling factors,compatibility issues of traditional encryption algorithms with real-world datasets are resolved.A nonlinear computation framework is constructed using interactive protocols,enabling secure computation of complex kernel functions through two-party computation and random perturbation techniques combined with Taylor polynomial approximation,while relying solely on additive homomorphic encryption.The framework supports secure computation of linear kernels,polynomial kernels,and Gaussian kernels within a single cryptographic system.The correctness,security,and computational complexity of the scheme are ana-lyzed,and its application scenarios are discussed.Experimental results show that the proposed scheme achieves the privacy protection goal effectively while maintaining the accuracy of kernel function model,and has the advantages of low computational complexity and low time overhead.

张明武;黄子麒;王玉珠

湖北工业大学计算机学院,武汉 430068||绿色智能算力网络湖北省重点实验室,武汉 430068湖北工业大学计算机学院,武汉 430068湖北工业大学计算机学院,武汉 430068||绿色智能算力网络湖北省重点实验室,武汉 430068

信息技术与安全科学

线性可分线性核多项式核高斯核隐私保护

linearly separablelinear kernelpolynomial kernelgaussian kernelprivacy protection

《密码学报(中英文)》 2026 (1)

28-42,15

国家自然科学基金(62472150,62072134)湖北省重大研究计划(2023BAA027)湖北省重点研发计划(2021BEA163)National Natural Science Foundation of China(62472150,62072134)Major Research Plan of Hubei Provience(2023BAA027)Key Research and Development Program of Hubei Province(2021BEA163)

10.13868/j.cnki.jcr.000836

评论