Confidential Federated Computations
Fuente:
arXiv
Saved in:
| Main Authors: | , , , , , , , , , , , , , |
|---|---|
| Format: | Preprint |
| Published: |
2024
|
| Subjects: | |
| Online Access: | |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| _version_ | 1866917943459184640 |
|---|---|
| author | Eichner, Hubert Ramage, Daniel Bonawitz, Kallista Huba, Dzmitry Santoro, Tiziano McLarnon, Brett Van Overveldt, Timon Fallen, Nova Kairouz, Peter Cheu, Albert Daly, Katharine Gascon, Adria Gruteser, Marco McMahan, Brendan |
| author_facet | Eichner, Hubert Ramage, Daniel Bonawitz, Kallista Huba, Dzmitry Santoro, Tiziano McLarnon, Brett Van Overveldt, Timon Fallen, Nova Kairouz, Peter Cheu, Albert Daly, Katharine Gascon, Adria Gruteser, Marco McMahan, Brendan |
| contents | Federated Learning and Analytics (FLA) have seen widespread adoption by technology platforms for processing sensitive on-device data. However, basic FLA systems have privacy limitations: they do not necessarily require anonymization mechanisms like differential privacy (DP), and provide limited protections against a potentially malicious service provider. Adding DP to a basic FLA system currently requires either adding excessive noise to each device's updates, or assuming an honest service provider that correctly implements the mechanism and only uses the privatized outputs. Secure multiparty computation (SMPC) -based oblivious aggregations can limit the service provider's access to individual user updates and improve DP tradeoffs, but the tradeoffs are still suboptimal, and they suffer from scalability challenges and susceptibility to Sybil attacks. This paper introduces a novel system architecture that leverages trusted execution environments (TEEs) and open-sourcing to both ensure confidentiality of server-side computations and provide externally verifiable privacy properties, bolstering the robustness and trustworthiness of private federated computations. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2404_10764 |
| institution | arXiv |
| publishDate | 2024 |
| record_format | arxiv |
| spellingShingle | Confidential Federated Computations Eichner, Hubert Ramage, Daniel Bonawitz, Kallista Huba, Dzmitry Santoro, Tiziano McLarnon, Brett Van Overveldt, Timon Fallen, Nova Kairouz, Peter Cheu, Albert Daly, Katharine Gascon, Adria Gruteser, Marco McMahan, Brendan Cryptography and Security Machine Learning Federated Learning and Analytics (FLA) have seen widespread adoption by technology platforms for processing sensitive on-device data. However, basic FLA systems have privacy limitations: they do not necessarily require anonymization mechanisms like differential privacy (DP), and provide limited protections against a potentially malicious service provider. Adding DP to a basic FLA system currently requires either adding excessive noise to each device's updates, or assuming an honest service provider that correctly implements the mechanism and only uses the privatized outputs. Secure multiparty computation (SMPC) -based oblivious aggregations can limit the service provider's access to individual user updates and improve DP tradeoffs, but the tradeoffs are still suboptimal, and they suffer from scalability challenges and susceptibility to Sybil attacks. This paper introduces a novel system architecture that leverages trusted execution environments (TEEs) and open-sourcing to both ensure confidentiality of server-side computations and provide externally verifiable privacy properties, bolstering the robustness and trustworthiness of private federated computations. |
| title | Confidential Federated Computations |
| topic | Cryptography and Security Machine Learning |
| url | https://arxiv.org/abs/2404.10764 |