首页|期刊导航|计算机科学与探索|多服务器可追责的隐私保护联邦学习方案

多服务器可追责的隐私保护联邦学习方案OA

Multi-server Accountable Privacy Protection Federated Learning Scheme

中文摘要英文摘要

随着人工智能技术的快速发展,数据驱动的机器学习模型在金融、交通和医疗等领域获得广泛应用.然而,大规模数据被分散存储在不同机构,形成"数据孤岛",严重制约了人工智能的快速发展.联邦学习作为突破数据孤岛的新兴框架,允许参与方在保护数据隐私的前提下对模型进行协同训练.而现有联邦学习方案面临隐私泄露风险高和聚合结果可信度低等挑战.针对这些问题,设计了一种多服务器可追责的隐私保护联邦学习方案(MSAFL),具有以下特点:(1)分布式多服务器的联邦学习架构,利用区块链技术构建安全可信的模型聚合平台;(2)采用门限秘密共享机制,通过梯度分片传输保障数据隐私;(3)利用线性同态哈希与区块链技术建立聚合结果可验证和恶意行为可追溯体系.理论分析表明,MSAFL方案具有结果可验证性、恶意服务器可追责性、鲁棒性以及安全性.实验结果表明,在MNIST基准数据集上,与传统的联邦平均算法(FedAvg)相比,MSAFL方案在确保模型收敛性能的同时,能够有效防御梯度泄露攻击.进一步对比其他相关方案显示,MSAFL方案在安全性与计算效率之间实现了平衡.

With the rapid development of artificial intelligence technology,data-driven machine learning models have been widely used in finance,transportation and medical care.However,large-scale data are scattered and stored in different institutions,forming"data islands",which seriously restricts the rapid development of artificial intelligence.As an emerging framework to break through data islands,federated learning allows participants to co-train models under the premise of protecting data privacy.However,the existing federated learning schemes face challenges such as high risk of privacy leakage and low credibility of aggregation results.To solve these problems,this paper designs a multi-server accountable privacy-preserving federated learning scheme(MSAFL),which has the following characteristics:(1)It is a distributed multi-server federated learning architecture,and uses blockchain technology to build a secure and trusted model aggrega-tion platform;(2)The threshold secret sharing mechanism is used to protect data privacy through gradient fragmentation transmission;(3)Linear homomorphic hashing and blockchain technology are used to establish the verifiable aggregation results and the traceability system of malicious behavior.Theoretical analysis shows that MSAFL scheme has verifiability of results,accountability of malicious servers,robustness and security.Experimental results show that on the MNIST benchmark dataset,compared with the traditional federated averaging algorithm(FedAvg),the MSAFL scheme can effec-tively defend against gradient leakage attacks while ensuring the model convergence performance.Further comparison with other related schemes shows that MSAFL achieves a balance between security and computational efficiency.

郭瑞;李非凡;张应辉;刘光军;李雪雷

西安邮电大学 网络空间安全学院,西安 710121||西安邮电大学 无线网络安全技术国家工程研究中心,西安 710121西安邮电大学 网络空间安全学院,西安 710121||西安邮电大学 无线网络安全技术国家工程研究中心,西安 710121西安邮电大学 网络空间安全学院,西安 710121||西安邮电大学 无线网络安全技术国家工程研究中心,西安 710121西安文理学院 信息工程学院,西安 710065浪潮(北京)电子信息产业有限公司,北京 100089

信息技术与安全科学

联邦学习隐私保护秘密共享线性同态哈希可追责

federated learningprivacy preservingsecret sharinglinear homomorphic hashingaccountable

《计算机科学与探索》 2026 (5)

1380-1393,14

国家密码科学基金(2025NCSF02037)国家自然科学基金(62072369)北京市科技新星计划(20230484455)陕西省重点研发计划项目(2020ZDLGY08-04)陕西省创新能力支持计划基金(2020KJXX-052)陕西省自然科学基金一般项目(2024JC-YBMS-545,2024JC-YBMS-557)陕西省高校青年创新团队项目(23JP160)西安市科技计划项目(23KGDW0018-2023).This work was supported by the National Cryptologic Science Fund of China(2025NCSF02037),the National Natural Science Founda-tion of China(62072369),the Beijing Nova Program(20230484455),the Key Research and Development Program of Shaanxi Province(2020ZDLGY08-04),the Innovation Capacity Support Program of Shaanxi Province(2020KJXX-052),the General Program of Natural Science Foundation of Shaanxi Province(2024JC-YBMS-545,2024JC-YBMS-557),the Project of Youth Innovation Team of Shaanxi Universities(23JP160),and the Science and Technology Program of Xi'an(23KGDW0018-2023).

10.3778/j.issn.1673-9418.2506032

评论