Efficient and Privacy-Preserving Neural Network Prediction Scheme with TEE.

Xingdong Liu,Hui Zhu,Fengwei Wang,Yandong Zheng,Zhe Liu
DOI: https://doi.org/10.1109/icc45041.2023.10278683
2023-01-01
Abstract:With the rapid development of machine learning, MLaaS has infiltrated into many fields such as image recognition, natural language processing, medical diagnosis, and so on. However, in MLaaS, data interaction between users and service providers is inevitable, and both users' private data and servers' model parameters are at risk of privacy disclosure. In order to solve this problem, homomorphic encryption is an extensively used technique to process private information over ciphertexts. However, since homomorphic encryption only supports linear operations, approximation techniques are required to calculate nonlinear functions, which leads to the loss of prediction accuracy and heavy computation overhead. Therefore, in this paper, we propose a secure neural network prediction scheme combining the trusted execution environment and homomorphic encryption with different security assumptions. Specifically, we first define the security model of TEE-assisted neural network prediction. Then, by combining a lightweight homomorphic encryption technique with TEE, we design secure neural network prediction protocols under different security levels, with which neural network prediction can be securely processed with high performance and accuracy. Finally, we evaluate the performance of our scheme on the MNIST, Fashion-MNIST, and KMNIST datasets, and the results demonstrate that our scheme indeed improves the prediction efficiency and accuracy compared to traditional homomorphic encryption-based schemes with polynomial approximation.
What problem does this paper attempt to address?