Abstract:With the emergence of privacy leaks in federated learning, secure aggregation protocols that mainly adopt either homomorphic encryption or threshold secret sharing have been widely developed for federated learning to protect the privacy of the local training data of each client. However, these existing protocols suffer from many shortcomings, such as the dependence on a trusted third party, the vulnerability to clients being corrupted, low efficiency, the trade-off between security and fault tolerance, etc. To solve these disadvantages, we propose an efficient and multi-private key secure aggregation scheme for federated learning. Specifically, we skillfully modify the variant ElGamal encryption technique to achieve homomorphic addition operation, which has two important advantages: 1) The server and each client can freely select public and private keys without introducing a trust third party and 2) Compared to the variant ElGamal encryption, the plaintext space is relatively large, which is more suitable for the deep model. Besides, for the high dimensional deep model parameter, we introduce a super-increasing sequence to compress multi-dimensional data into 1-D, which can greatly reduce encryption and decryption times as well as communication for ciphertext transmission. Detailed security analyses show that our proposed scheme achieves the semantic security of both individual local gradients and the aggregated result while achieving optimal robustness in tolerating both client collusion and dropped clients. Extensive simulations demonstrate that the accuracy of our scheme is almost the same as the non-private approach, while the efficiency of our scheme is much better than the state-of-the-art homomorphic encryption-based secure aggregation schemes. More importantly, the efficiency advantages of our scheme will become increasingly prominent as the number of model parameters increases.

AAIA: an efficient aggregation scheme against inverting attack for federated learning

An Efficient and Multi-Private Key Secure Aggregation Scheme for Federated Learning

FedDAA: a robust federated learning framework to protect privacy and defend against adversarial attack

An Efficient and Multi-private Key Secure Aggregation for Federated Learning

Client-Side Gradient Inversion Attack in Federated Learning Using Secure Aggregation

A New Federated Learning Framework Against Gradient Inversion Attacks

An efficient privacy-preserving and verifiable scheme for federated learning

A Blockchain Based Decentralized Gradient Aggregation Design for Federated Learning

Secure Aggregation Protocol Based on DC-Nets and Secret Sharing for Decentralized Federated Learning

Practical and Efficient Secure Aggregation for Privacy-Preserving Machine Learning.

Client-specific Property Inference against Secure Aggregation in Federated Learning

Split Aggregation: Lightweight Privacy-Preserving Federated Learning Resistant to Byzantine Attacks

Efficient Vertical Federated Learning with Secure Aggregation

A Lightweight and Accuracy-Lossless Privacy-Preserving Method in Federated Learning

Breaking Secure Aggregation: Label Leakage from Aggregated Gradients in Federated Learning

Stealing Secrecy from Outside: A Novel Gradient Inversion Attack in Federated Learning

A Federated Learning Aggregation That Integrates Clustering and Momentum Correction Based on Historical High-Quality Gradients

Evaluating Gradient Inversion Attacks and Defenses in Federated Learning

Defending against gradient inversion attacks in federated learning via statistical machine unlearning

Gradients Stand-in for Defending Deep Leakage in Federated Learning

FSSA: Efficient 3-Round Secure Aggregation for Privacy-Preserving Federated Learning