Cited by 1,662Privacy-Preserving Technologies in DataCryptography and Data SecurityCloud Data Security Solutions

Privacy-Preserving Deep Learning via Additively Homomorphic Encryption

Phong, Le Trieu, Aono, Yoshinori, Hayashi, Takuya, Wang, Lihua, Moriai, Shiho·2018·IEEE Transactions on Information Forensics and Security

Abstract

We present a privacy-preserving deep learning system in which many learning participants perform neural network-based deep learning over a combined dataset of all, without revealing the participants' local data to a central server. To that end, we revisit the previous work by Shokri and Shmatikov (ACM CCS 2015) and show that, with their method, local data information may be leaked to an honest-but-curious server. We then fix that problem by building an enhanced system with the following properties: 1) no information is leaked to the server and 2) accuracy is kept intact, compared with that of the ordinary deep learning system also over the combined dataset. Our system bridges deep learning and cryptography: we utilize asynchronous stochastic gradient descent as applied to neural networks, in combination with additively homomorphic encryption. We show that our usage of encryption adds tolerable overhead to the ordinary deep learning system.

Integrity signals

Registry

Crossref · 10.1109/tifs.2017.2787987

Cites

23 of 23 references verified0 citation errors · 0 not checkable

Statistics

Recomputing p-values needs the paper’s full text.

Claims the paper makes

This paper’s full text isn’t openly available, so its claims and self-check weren’t run. The registry and citation checks still apply.

Claims other papers make about this one

Each is checked against this paper’s own text: does it say what the citing paper says it does?

  • Malicious hacker attacks and dishonest participants may use the model parameters to infer the original data.

    “For example, malicious hacker attacks and dishonest participants may use the model parameters to infer the original data (Phong et al. 2017).”
  • The processes of uploading and downloading the model update parameters, training iterations, and other processes still expose the FL environment to a series of risks.

    “However, the processes of uploading and downloading the model update parameters, training iterations, and other processes still expose the FL environment to a series of risks.”
  • Even a small portion of gradients can reveal a fair amount of sensitive information about the local data.

    “For instance, as mentioned in [31], even a small portion of gradients can reveal a fair amount of sensitive information about the local data.”

Cites

Flagged first, then by citations

Cited by

Sorted by citations

Authors
Phong, L. T., Aono, Y., Hayashi, T., Wang, L., & Moriai, S.
Affiliations
  • National Institute of Information and Communications Technology (JP)
  • Kobe University (JP)
Venue
IEEE Transactions on Information Forensics and Security
Published
2018-05
Volume
13
Issue
5
Pages
1333-1345
ISSN
  • 1556-6013 (ISSN-L)
  • 1556-6021
OpenAlex
W2781091734
Cited by
1,662
References
23
Citations by year
2026: 115 · 2025: 255 · 2024: 314 · 2023: 275 · 2022: 248 · 2021: 227 · 2020: 149 · 2019: 65 · 2018: 14
FWCI
37.19
Type
journal article
Language
en
Open access
closed
Locations
IEEE Transactions on Information Forensics and Security (publishedVersion)
Funders
Japan Science and Technology Agency CREST (JPMJCR168A)
Topics
  • Physical Sciences › Computer Science › Artificial Intelligence › Privacy-Preserving Technologies in Data
  • Physical Sciences › Computer Science › Artificial Intelligence › Cryptography and Data Security
  • Physical Sciences › Computer Science › Information Systems › Cloud Data Security Solutions
Keywords
privacy-preserving deep learning, honest-but-curious server, data leakage, asynchronous stochastic gradient descent, artificial neural networks

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review