论文标题
基于当地差异隐私的联邦学习物联网
Local Differential Privacy based Federated Learning for Internet of Things
论文作者
论文摘要
车辆互联网(IOV)是物联网的有前途的分支。 IoV simulates a large variety of crowdsourcing applications such as Waze, Uber, and Amazon Mechanical Turk, etc. Users of these applications report the real-time traffic information to the cloud server which trains a machine learning model based on traffic information reported by users for intelligent traffic management.但是,众包应用程序所有者可以轻松地推断用户的位置信息,这引起了用户的严重位置隐私问题。此外,随着车辆数量的增加,车辆和云服务器之间的频繁通信会产生意外的通信成本。为了避免隐私威胁并降低沟通成本,我们建议将联合学习和当地差异隐私(LDP)整合起来,以促进众包应用程序以实现机器学习模型。具体而言,我们提出了四种自由顾展机制,以使车辆生成。提出了三种输出机制,该机制引入了三种不同的产出可能性,以便在隐私预算很小时提供高精度。可以用两个位对三个输出的输出可能性进行编码,以降低通信成本。此外,为了最大程度地提高隐私预算较大的性能,提出了最佳的分段机制(PM-OPT)。我们进一步提出了一种次优机制(PM-SUB),具有简单的公式和与PM-OPT可比性的效用。然后,我们通过组合三个输出和PM-SUB来构建一种新型的混合机制。
Internet of Vehicles (IoV) is a promising branch of the Internet of Things. IoV simulates a large variety of crowdsourcing applications such as Waze, Uber, and Amazon Mechanical Turk, etc. Users of these applications report the real-time traffic information to the cloud server which trains a machine learning model based on traffic information reported by users for intelligent traffic management. However, crowdsourcing application owners can easily infer users' location information, which raises severe location privacy concerns of the users. In addition, as the number of vehicles increases, the frequent communication between vehicles and the cloud server incurs unexpected amount of communication cost. To avoid the privacy threat and reduce the communication cost, in this paper, we propose to integrate federated learning and local differential privacy (LDP) to facilitate the crowdsourcing applications to achieve the machine learning model. Specifically, we propose four LDP mechanisms to perturb gradients generated by vehicles. The Three-Outputs mechanism is proposed which introduces three different output possibilities to deliver a high accuracy when the privacy budget is small. The output possibilities of Three-Outputs can be encoded with two bits to reduce the communication cost. Besides, to maximize the performance when the privacy budget is large, an optimal piecewise mechanism (PM-OPT) is proposed. We further propose a suboptimal mechanism (PM-SUB) with a simple formula and comparable utility to PM-OPT. Then, we build a novel hybrid mechanism by combining Three-Outputs and PM-SUB.