Verifiable decentralized federated learning (FL) systems combining
blockchains and zero-knowledge proofs (ZKP) make the computational integrity of
local learning and global aggregation verifiable across workers. However, they
are not end-to-end: data can still be corrupted prior to the learning. In this
paper, we propose a verifiable decentralized FL system for end-to-end integrity
and authenticity of data and computation extending verifiability to the data
source. Addressing an inherent conflict of confidentiality and transparency, we
introduce a two-step proving and verification (2PV) method that we apply to
central system procedures: a registration workflow that enables non-disclosing
verification of device certificates and a learning workflow that extends
existing blockchain and ZKP-based FL systems through non-disclosing data
authenticity proofs. Our evaluation on a prototypical implementation
demonstrates the technical feasibility with only marginal overheads to
state-of-the-art solutions.

提出了一个可验证的分散式联邦学习系统，结合区块链和零知识证明，可以在工作者之间验证本地学习和全局聚合的计算完整性。通过引入两步证明和验证的方法，实现了数据和计算的端到端完整性和真实性验证，解决了机密性和透明性之间的冲突。在一个原型实现上的评估表明，与最先进的解决方案相比，技术上是可行的，并且只有较小的性能开销。