Toward provably private analytics and insights into GenAI use
Fuente:
arXiv
Salvato in:
| Autori principali: | , , , , , , , , , , |
|---|---|
| Natura: | Preprint |
| Pubblicazione: |
2025
|
| Soggetti: | |
| Accesso online: | |
| Tags: |
Aggiungi Tag
Nessun Tag, puoi essere il primo ad aggiungerne!!
|
| _version_ | 1866914112389251072 |
|---|---|
| author | Cheu, Albert Lagzdin, Artem McLarnon, Brett Ramage, Daniel Daly, Katharine Gruteser, Marco Kairouz, Peter Tandon, Rakshita Chiknavaryan, Stanislav Van Overveldt, Timon Gong, Zoe |
| author_facet | Cheu, Albert Lagzdin, Artem McLarnon, Brett Ramage, Daniel Daly, Katharine Gruteser, Marco Kairouz, Peter Tandon, Rakshita Chiknavaryan, Stanislav Van Overveldt, Timon Gong, Zoe |
| contents | Large-scale systems that compute analytics over a fleet of devices must achieve high privacy and security standards while also meeting data quality, usability, and resource efficiency expectations. We present a next-generation federated analytics system that uses Trusted Execution Environments (TEEs) based on technologies like AMD SEV-SNP and Intel TDX to provide verifiable privacy guarantees for all server-side processing. In our system, devices encrypt and upload data, tagging it with a limited set of allowable server-side processing steps. An open source, TEE-hosted key management service guarantees that the data is accessible only to those steps, which are themselves protected by TEE confidentiality and integrity assurance guarantees. The system is designed for flexible workloads, including processing unstructured data with LLMs (for structured summarization) before aggregation into differentially private insights (with automatic parameter tuning). The transparency properties of our system allow any external party to verify that all raw and derived data is processed in TEEs, protecting it from inspection by the system operator, and that differential privacy is applied to all released results. This system has been successfully deployed in production, providing helpful insights into real-world GenAI experiences. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2510_21684 |
| institution | arXiv |
| publishDate | 2025 |
| record_format | arxiv |
| spellingShingle | Toward provably private analytics and insights into GenAI use Cheu, Albert Lagzdin, Artem McLarnon, Brett Ramage, Daniel Daly, Katharine Gruteser, Marco Kairouz, Peter Tandon, Rakshita Chiknavaryan, Stanislav Van Overveldt, Timon Gong, Zoe Cryptography and Security Large-scale systems that compute analytics over a fleet of devices must achieve high privacy and security standards while also meeting data quality, usability, and resource efficiency expectations. We present a next-generation federated analytics system that uses Trusted Execution Environments (TEEs) based on technologies like AMD SEV-SNP and Intel TDX to provide verifiable privacy guarantees for all server-side processing. In our system, devices encrypt and upload data, tagging it with a limited set of allowable server-side processing steps. An open source, TEE-hosted key management service guarantees that the data is accessible only to those steps, which are themselves protected by TEE confidentiality and integrity assurance guarantees. The system is designed for flexible workloads, including processing unstructured data with LLMs (for structured summarization) before aggregation into differentially private insights (with automatic parameter tuning). The transparency properties of our system allow any external party to verify that all raw and derived data is processed in TEEs, protecting it from inspection by the system operator, and that differential privacy is applied to all released results. This system has been successfully deployed in production, providing helpful insights into real-world GenAI experiences. |
| title | Toward provably private analytics and insights into GenAI use |
| topic | Cryptography and Security |
| url | https://arxiv.org/abs/2510.21684 |