基于同态加密和模型水印的安全可信联邦学习  

Secure and trusted federation learning based on homomorphic encryption and model watermarking

作　　者：黄慧杰 季鑫慧 白锐 左毅 刘梦杰 陈珍萍[1] HUANG Hui-jie;JI Xin-hui;BAI Rui;ZUO Yi;LIU Meng-jie;CHEN Zhen-ping(School of Electronic and Information Engineering,Suzhou University of Science and Technology,Suzhou 215009,China;Suzhou Power Supply Branch,State Grid Jiangsu Electric Power Co.,Ltd.,Suzhou 215000,China)

机构地区：[1]苏州科技大学电子与信息工程学院,江苏苏州215009 [2]国网江苏省电力有限公司苏州供电分公司,江苏苏州215000

出　　处：《计算机工程与设计》2024年第9期2591-2598,共8页Computer Engineering and Design

基　　金：国家自然科学基金项目(51874205);江苏省研究生科研与实践创新计划基金项目(KYCX22_3275)。

摘　　要：为防止联邦学习客户端共享的中间参数泄露,同时保证服务器与客户端的可信性,提出一种结合同态加密和模型水印的联邦学习框架。将Paillier加密技术运用到模型参数的安全聚合中,对参数聚合时的加法同态性进行证明,为提高加密效率在加密前将模型参数进行量化处理;将模型水印技术拓展到安全联邦学习中,利用投影矩阵和正则化函数构建模型水印,将水印模型进行聚合。在MNIST和CIFAR10数据集上的实验验证了提出方法的有效性,提高模型参数加密效率,保证模型的版权。To prevent the leakage of intermediate parameters shared by federated learning clients and to ensure the trustworthiness between the server and the client,a federated learning framework combining homomorphic encryption and model watermarking was proposed.The Paillier encryption was applied to secure aggregation of model parameters and the additive homomorphism in parameter aggregation was proved,while model parameters were quantified before encryption to improve encryption efficiency.The model watermarking technique was extended to secure federal learning by constructing model watermarks using projection matrices and regularization functions and aggregating the watermarked models.Experiments on the MNIST and CIFAR10 datasets validate the effectiveness of the proposed method,the encryption efficiency of model parameters is improved and the copyright of the models is ensured.

关 键 词：联邦学习 安全可信 参数量化 模型聚合 同态加密 投影矩阵 模型水印 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]