基于区块链和隐私计算的联邦学习数据安全聚合方法
随着5G与人工智能的发展,海量分布式智能终端生成的本地数据呈指数级增长。为在保护用户隐私的同时促进数据共享,联邦学习技术通过参数聚合实现了分布式模型训练。然而,传统联邦学习的中心化架构存在单点故障风险,且面临推理攻击等隐私泄露威胁。为此,本文提出一种融合区块链与隐私计算的数据安全聚合策略,解决跨区域多终端场景下模型参数传输与聚合中的隐私泄露与数据完整性问题。该方案搭建了以区域服务器簇为核心的联邦学习架构,通过分布式存储与计算降低单点故障风险,并结合区块链智能合约确保数据聚合的透明性、可追溯性与不可篡改性。进一步提出轻量化隐私保护方案,结合椭圆曲线同态加密与动态门限Shamir秘密共享技术,实现梯度参数的分片加密上传与分布式聚合。理论分析表明,该方案在半诚实与主动攻击模型下可有效抵御梯度反演与合谋攻击。实验证明,其在模型精度损失可控的前提下,显著降低了通信与计算开销,验证了其实际应用的可行性与高效性。
With the development of 5G and artificial intelligence, the local data generated by massive distributed intelligent terminals is growing exponentially. In order to promote data sharing while protecting user privacy, federated learning technology realizes distributed model training through parameter aggregation. However, the centralized architecture of traditional federated learning has the risk of single point of failure, and faces privacy disclosure threats such as inference attacks. Therefore, this thesis proposes a data security aggregation strategy that integrates blockchain and privacy computing to solve the privacy leakage and data integrity problems in the transmission and aggregation of model parameters in cross-region multi-terminal scenarios. The solution builds a federated learning architecture with regional server clusters as the core, reduces the risk of single point of failure through distributed storage and computing, and ensures transparency, traceability and immutability of data aggregation combined with blockchain smart contracts. Further, a lightweight privacy protection scheme is proposed, which combines elliptic curve homologous encryption and dynamic threshold Shamir secret sharing technology to realize fragment encryption upload and distributed aggregation of gradient parameters. Theoretical analysis shows that this scheme can effectively resist gradient inversion and collusion attacks under semi-honest and active attack models. The experimental results show that the communication and calculation cost are significantly reduced under the premise of controllable model accuracy loss, and the feasibility and high efficiency of the practical application are verified.
孙弘业、王冬宇
北京邮电大学人工智能学院,北京 100876北京邮电大学人工智能学院,北京 100876
计算技术、计算机技术通信
联邦学习区块链隐私计算数据聚合Shamir秘密共享同态加密
federated learning blockchain privacy computing data aggregation Shamir secret sharing homomorphic encryption
孙弘业,王冬宇.基于区块链和隐私计算的联邦学习数据安全聚合方法[EB/OL].(2025-03-10)[2025-05-22].http://www.paper.edu.cn/releasepaper/content/202503-86.点此复制
评论