Federated learning has recently emerged as a paradigm promising the benefits
of harnessing rich data from diverse sources to train high quality models, with
the salient features that training datasets never leave local devices. Only
model updates are locally computed and shared for aggregation to produce a
global model. While federated learning greatly alleviates the privacy concerns
as opposed to learning with centralized data, sharing model updates still poses
privacy risks. In this paper, we present a system design which offers efficient
protection of individual model updates throughout the learning procedure,
allowing clients to only provide obscured model updates while a cloud server
can still perform the aggregation. Our federated learning system first departs
from prior works by supporting lightweight encryption and aggregation, and
resilience against drop-out clients with no impact on their participation in
future rounds. Meanwhile, prior work largely overlooks bandwidth efficiency
optimization in the ciphertext domain and the support of security against an
actively adversarial cloud server, which we also fully explore in this paper
and provide effective and efficient mechanisms. Extensive experiments over
several benchmark datasets (MNIST, CIFAR-10, and CelebA) show our system
achieves accuracy comparable to the plaintext baseline, with practical
performance.

本文介绍了一个基于轻量级加密和数据混淆的联邦学习系统，结合恰当的带宽效率优化和对云服务器主动攻击的安全保护机制，在保证客户端数据隐私的前提下，整合来自多源的数据进行联合训练，并在多项数据集（MNIST、CIFAR-10、CelebA）上验证该系统的可行性及精度。