TY - JOUR
T1 - Secure Decentralized Aggregation to Prevent Membership Privacy Leakage in Edge-based Federated Learning
AU - Shen, Meng
AU - Wang, Jing
AU - Zhang, Jie
AU - Zhao, Qinglin
AU - Peng, Bohan
AU - Wu, Tong
AU - Zhu, Liehuang
AU - Xu, Ke
N1 - Publisher Copyright:
IEEE
PY - 2024
Y1 - 2024
N2 - Federated Learning (FL) is a machine learning approach that enables multiple users to share their local models for the aggregation of a global model, protecting data privacy by avoiding the sharing of raw data. However, frequent parameter sharing between users and the aggregator can incur high risk of membership privacy leakage. In this paper, we propose LiPFed, a computationally lightweight privacy preserving FL scheme using secure decentralized aggregation for edge networks. Under this scheme, we ensure privacy preservation on the aggregation side, and promote lightweight computation on the user side. By incorporating blockchain and additive secret sharing algorithm, we effectively protect the membership privacy of both local models and global models. Furthermore, the secure decentralized aggregation mechanism safeguards against potential compromises of the aggregator. Meanwhile, smart contract is introduced to identify malicious models uploaded by edge nodes and return trustworthy global models to users. Rigorous security analysis shows the effectiveness of this scheme in privacy preservation. Extensive experiments verify that LiPFed outperforms the state-of-the-art schemes in terms of training efficiency, model accuracy, and privacy preservation.
AB - Federated Learning (FL) is a machine learning approach that enables multiple users to share their local models for the aggregation of a global model, protecting data privacy by avoiding the sharing of raw data. However, frequent parameter sharing between users and the aggregator can incur high risk of membership privacy leakage. In this paper, we propose LiPFed, a computationally lightweight privacy preserving FL scheme using secure decentralized aggregation for edge networks. Under this scheme, we ensure privacy preservation on the aggregation side, and promote lightweight computation on the user side. By incorporating blockchain and additive secret sharing algorithm, we effectively protect the membership privacy of both local models and global models. Furthermore, the secure decentralized aggregation mechanism safeguards against potential compromises of the aggregator. Meanwhile, smart contract is introduced to identify malicious models uploaded by edge nodes and return trustworthy global models to users. Rigorous security analysis shows the effectiveness of this scheme in privacy preservation. Extensive experiments verify that LiPFed outperforms the state-of-the-art schemes in terms of training efficiency, model accuracy, and privacy preservation.
KW - Federated learning
KW - consortium blockchain
KW - decentralized aggregation
KW - privacy preservation
UR - http://www.scopus.com/inward/record.url?scp=85187304931&partnerID=8YFLogxK
U2 - 10.1109/TNSE.2024.3360311
DO - 10.1109/TNSE.2024.3360311
M3 - Article
AN - SCOPUS:85187304931
SN - 2327-4697
SP - 1
EP - 14
JO - IEEE Transactions on Network Science and Engineering
JF - IEEE Transactions on Network Science and Engineering
ER -