Secure Embedding Aggregation for Cross-Silo Federated Representation Learning

IF 8 1区 计算机科学 Q1 COMPUTER SCIENCE, THEORY & METHODS
Songze Li;Jiaxiang Tang;Jinbao Zhu;Kai Zhang;Lichao Sun;Changyu Dong
{"title":"Secure Embedding Aggregation for Cross-Silo Federated Representation Learning","authors":"Songze Li;Jiaxiang Tang;Jinbao Zhu;Kai Zhang;Lichao Sun;Changyu Dong","doi":"10.1109/TIFS.2025.3580228","DOIUrl":null,"url":null,"abstract":"Representation learning plays a pivotal role in modern applications by enabling high-quality embeddings that support various downstream tasks such as recommendation, clustering, and personalized services. In federated representation learning (FRL), a central server collaborates with N clients, each holding private data, to jointly learn representations of entities (e.g., users in a social network). However, existing embedding aggregation protocols often fall short in either ensuring privacy protections or fully leveraging aggregation opportunities, leaving sensitive data exposed or vulnerable to collusion. To address these challenges, we propose SecEA, a secure embedding aggregation protocol that fully exploits all potential aggregation opportunities across all entities among clients while providing provable privacy guarantees. SecEA defends both local entities and their embeddings—ensuring computational security against a curious server and statistical privacy against up to <inline-formula> <tex-math>$T \\lt N/2$ </tex-math></inline-formula> colluding clients. Comprehensive experiments on various representation learning tasks in cross-silo scenarios demonstrate that SecEA incurs a negligible performance loss (within 5%) compared to protocols with weaker or no privacy guarantees, and its additional computational latency significantly diminishes when training deeper models on larger datasets. A parallel mechanism is also included, which helps further improve the efficiency linearly. These results underscore that SecEA not only provides full privacy protections for both entity and embedding, but also preserves the utility of the learned representations.","PeriodicalId":13492,"journal":{"name":"IEEE Transactions on Information Forensics and Security","volume":"20 ","pages":"6810-6825"},"PeriodicalIF":8.0000,"publicationDate":"2025-06-16","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"0","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"IEEE Transactions on Information Forensics and Security","FirstCategoryId":"94","ListUrlMain":"https://ieeexplore.ieee.org/document/11037435/","RegionNum":1,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"Q1","JCRName":"COMPUTER SCIENCE, THEORY & METHODS","Score":null,"Total":0}
引用次数: 0

Abstract

Representation learning plays a pivotal role in modern applications by enabling high-quality embeddings that support various downstream tasks such as recommendation, clustering, and personalized services. In federated representation learning (FRL), a central server collaborates with N clients, each holding private data, to jointly learn representations of entities (e.g., users in a social network). However, existing embedding aggregation protocols often fall short in either ensuring privacy protections or fully leveraging aggregation opportunities, leaving sensitive data exposed or vulnerable to collusion. To address these challenges, we propose SecEA, a secure embedding aggregation protocol that fully exploits all potential aggregation opportunities across all entities among clients while providing provable privacy guarantees. SecEA defends both local entities and their embeddings—ensuring computational security against a curious server and statistical privacy against up to $T \lt N/2$ colluding clients. Comprehensive experiments on various representation learning tasks in cross-silo scenarios demonstrate that SecEA incurs a negligible performance loss (within 5%) compared to protocols with weaker or no privacy guarantees, and its additional computational latency significantly diminishes when training deeper models on larger datasets. A parallel mechanism is also included, which helps further improve the efficiency linearly. These results underscore that SecEA not only provides full privacy protections for both entity and embedding, but also preserves the utility of the learned representations.
跨竖井联邦表示学习的安全嵌入聚合
表示学习在现代应用程序中发挥着关键作用,它支持支持各种下游任务(如推荐、聚类和个性化服务)的高质量嵌入。在联邦表示学习(FRL)中,中央服务器与N个客户端协作,每个客户端都持有私有数据,共同学习实体的表示(例如,社交网络中的用户)。然而,现有的嵌入聚合协议在确保隐私保护或充分利用聚合机会方面往往存在不足,导致敏感数据暴露或容易被串通。为了应对这些挑战,我们提出了SecEA,这是一种安全的嵌入聚合协议,它充分利用了客户端之间所有实体之间所有潜在的聚合机会,同时提供了可证明的隐私保证。SecEA既保护本地实体,也保护它们的嵌入——确保计算安全不受服务器的干扰,并保护统计隐私不受多达$T \lt N/2$串通客户端的影响。跨竖井场景中各种表示学习任务的综合实验表明,与具有较弱或没有隐私保证的协议相比,SecEA产生的性能损失可以忽略不计(在5%之内),并且当在更大的数据集上训练更深的模型时,其额外的计算延迟显着减少。同时采用并联机构,进一步提高了线性效率。这些结果强调SecEA不仅为实体和嵌入提供了充分的隐私保护,而且还保留了学习表征的实用性。
本文章由计算机程序翻译,如有差异,请以英文原文为准。
求助全文
约1分钟内获得全文 求助全文
来源期刊
IEEE Transactions on Information Forensics and Security
IEEE Transactions on Information Forensics and Security 工程技术-工程:电子与电气
CiteScore
14.40
自引率
7.40%
发文量
234
审稿时长
6.5 months
期刊介绍: The IEEE Transactions on Information Forensics and Security covers the sciences, technologies, and applications relating to information forensics, information security, biometrics, surveillance and systems applications that incorporate these features
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
确定
请完成安全验证×
copy
已复制链接
快去分享给好友吧!
我知道了
右上角分享
点击右上角分享
0
联系我们:info@booksci.cn Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。 Copyright © 2023 布克学术 All rights reserved.
京ICP备2023020795号-1
ghs 京公网安备 11010802042870号
Book学术文献互助
Book学术文献互助群
群 号:604180095
Book学术官方微信