Data Compliance Utilization Method Based on Adaptive Differential Privacy and Federated Learning.

Abstract

Federated learning (FL), as a method that coordinates multiple clients to train models together without handing over local data, is naturally privacy-preserving for data. However, there is still a risk that malicious attackers can steal intermediate parameters and infer the user's original data during the model training, thereby leaking sensitive data privacy. To address the above problems, we propose an adaptive differential privacy blockchain federated learning (ADP-BCFL) method to accomplish the compliant use of distributed data while ensuring security. First, utilize blockchain to accomplish secure storage and valid querying of user summary data. Second, propose an adaptive DP mechanism to be applied in the process of federal learning, which adaptively adjusts the threshold size of parameter tailoring according to the parameter characteristics, controls the amount of introduced noise, and ensures a good global model accuracy while effectively solving the problem of inference attack. Finally, the ADP-BCFL method was validated on the MNIST, Fashion MNIST datasets and spatiotemporal dataset to effectively balance model performance and privacy.