Abstract:As a means of decentralized machine learning, federated learning (FL) has recently drawn considerable attentions. One of the prominent advantages of FL is its capability of preventing clients' data from being directly exposed to external adversaries. Nevertheless, via a viewpoint of information theory, it is still possible for an attacker to steal private information from eavesdropping upon the shared models uploaded by FL clients. In order to address this problem, we develop a novel privacy preserving FL framework based on the concept of differential privacy (DP). To be specific, we first borrow the concept of local DP and introduce a client-level DP (CDP) by adding artificial noises to the shared models before uploading them to servers. Then, we prove that our proposed CDP algorithm can satisfy the DP guarantee with adjustable privacy protection levels by varying the variances of the artificial noises. More importantly, we derive a theoretical convergence upper-bound of the CDP algorithm. Our derived upper-bound reveals that there exists an optimal number of communication rounds to achieve the best convergence performance in terms of loss function values for a given privacy protection level. Furthermore, to obtain this optimal number of communication rounds, which cannot be derived in a closed-form expression, we propose a communication rounds discounting (CRD) method. Compared with the heuristic searching method, our proposed CRD can achieve a much better trade-off between the computational complexity of searching for the optimal number and the convergence performance. Extensive experiments indicate that our CDP algorithm with an optimization on the number of communication rounds using the proposed CRD can effectively improve both the FL training efficiency and FL model quality for a given privacy protection level.

FedPower: Privacy-Preserving Distributed Eigenspace Estimation

Projected Federated Averaging with Heterogeneous Differential Privacy.

FedPSE: Personalized Sparsification with Element-wise Aggregation for Federated Learning

Privacy-Preserving Power Consumption Prediction Based on Federated Learning with Cross-Entity Data

Performance-Enhanced Federated Learning with Differential Privacy for Internet of Things

Federated PCA and Estimation for Spiked Covariance Matrices: Optimal Rates and Efficient Algorithm

Energy Efficient and Differentially Private Federated Learning via a Piggyback Approach

Performance Analysis and Optimization in Privacy-Preserving Federated Learning

Clients Collaborate: Flexible Differentially Private Federated Learning with Guaranteed Improvement of Utility-Privacy Trade-off

Privacy-Preserving Federated Learning with Differentially Private Hyperdimensional Computing

EPFed: Achieving Optimal Balance between Privacy and Efficiency in Federated Learning

Differentially private and decentralized randomized power method

FedSeC: a Robust Differential Private Federated Learning Framework in Heterogeneous Networks

One-shot Empirical Privacy Estimation for Federated Learning

Balancing Privacy and Performance for Private Federated Learning Algorithms

FedDP-SA: Boosting Differentially Private Federated Learning Via Local Dataset Splitting

Fed-PEMC: A Privacy-Enhanced Federated Deep Learning Algorithm for Consumer Electronics in Mobile Edge Computing

Privacy-Enhanced Decentralized Federated Learning at Dynamic Edge

Probably Approximately Correct Federated Learning

PFLF: Privacy-Preserving Federated Learning Framework for Edge Computing

Private Federated Learning with Dynamic Power Control via Non-Coherent Over-the-Air Computation