Adaptive Clipping and Distillation Enabled Federated Unlearning

Zhiqiang Xie,Zhipeng Gao,Yijing Lin,Chen Zhao,Xinlei Yu,Ze Chai
DOI: https://doi.org/10.1109/icws62655.2024.00094
2024-01-01
Abstract:With the advancement of federated crowdsourcing services, the associated privacy concerns have attracted growing attention from both academia and industry. Existing privacy laws impose strict requirements concerning the right to be forgotten for data used in training AI models. In federated crowdsourcing services, the right to be forgotten is guaranteed through federated unlearning. Current federated unlearning solutions encompass a two-step process: first, eliminating model updates associated with the target data to achieve unlearning, followed by retraining among the remaining clients to restore the performance of federated crowdsourcing services. However, this indiscriminate removal of model updates, while safeguarding the privacy of the target data, also greatly undermines the generalization performance of the global model. Moreover, relying on client-side retraining imposes additional economic costs on the federated crowdsourcing service. To tackle the above issues, this paper proposes an efficient federated unlearning framework for federated crowdsourcing services, which is based on adaptive parameter clipping and data-free distillation. We first compute the Fisher information matrix (FIM) to approximate the correlation between the target data and all model parameters, which is utilized to adaptively clip each parameter of the global model. Then, we model the softmax layer of the global model to synthesize pseudo-samples, enabling the retrain process on the crowdsourcing platform for the recovery of generalization performance. We conducted extensive experiments on three datasets, and the results demonstrate that our proposed framework not only possesses outstanding data removal capability but also outperforms the comparison methods in terms of computation time and storage space.
What problem does this paper attempt to address?