Abstract:Large language models (LLMs), like ChatGPT, have greatly simplified text generation tasks. However, they have also raised concerns about privacy risks such as data leakage and unauthorized data collection. Existing solutions for privacy-preserving inference face practical challenges related to computation time and communication costs. In this paper, we propose InferDPT, the first practical framework for the privacy-preserving Inference of black-box LLMs, implementing Differential Privacy in Text generation. InferDPT comprises two key modules: the "perturbation module" utilizes the exponential mechanism to generate a perturbed prompt, facilitating privacy-preserving inference with black-box LLMs, and the "extraction module", inspired by knowledge distillation and retrieval-augmented generation, extracts coherent and consistent text from the perturbed generation result, ensuring successful text generation completion. To address privacy concerns related to previous exponential mechanisms' susceptibility to embedding revision attacks, we introduce RANTEXT, a novel differential privacy mechanism integrated into the perturbation module of InferDPT, which introduces the concept of "RANdom adjacency" for TEXT perturbation within the prompt. Experimental results across three datasets demonstrate that the text generation quality of InferDPT is comparable to that of non-private GPT-4, and RANTEXT surpasses existing state-of-the-art mechanisms, namely, SANTEXT+ and CUSTEXT+ in the trade-off between privacy and utility. Even with an privacy parameter epsilon value of 6.0, RANTEXT achieves an average privacy protection rate exceeding 90% against embedding revision attacks, which is 0.58 times higher than that of SANTEXT+ and 3.35 times higher than that of CUSTEXT+.

Disentangling the Linguistic Competence of Privacy-Preserving BERT

Characterizing Stereotypical Bias from Privacy-preserving Pre-Training

Guiding Text-to-Text Privatization by Syntax

Thinking Outside of the Differential Privacy Box: A Case Study in Text Privatization with Language Model Prompting

How reparametrization trick broke differentially-private text representation learning

Differentially Private Language Models Benefit from Public Pre-training

Differentially Private Language Models for Secure Data Sharing

Differentially Private Fine-tuning of Language Models

InferDPT: Privacy-Preserving Inference for Black-box Large Language Model

Driving Context into Text-to-Text Privatization

Textual Differential Privacy for Context-Aware Reasoning with Large Language Model

A Different Level Text Protection Mechanism With Differential Privacy

IDT: Dual-Task Adversarial Attacks for Privacy Protection

Leveraging Hierarchical Representations for Preserving Privacy and Utility in Text

Differentially Private Distributed Learning for Language Modeling Tasks

Keep It Private: Unsupervised Privatization of Online Text

Just Rewrite It Again: A Post-Processing Method for Enhanced Semantic Similarity and Privacy Preservation of Differentially Private Rewritten Text

Split-and-Denoise: Protect large language model inference with local differential privacy

Differentially Private Natural Language Models: Recent Advances and Future Directions

Privacy-Preserving In-Context Learning for Large Language Models

Efficient and Private: Memorisation under differentially private parameter-efficient fine-tuning in language models