Pré-Publication, Document De Travail Année : 2024

FedCrypt: A Dynamic White-Box Watermarking Scheme for Homomorphic Federated Learning

Résumé

Federated Learning (FL) allows multiple clients to collaboratively train a model without outsourcing their datasets. This process is orchestrated by a server that only accesses the model parameters and aggregates them during each round of FL training. However, the server's access to these parameters can compromise data privacy through attacks like model inversion. To mitigate these risks, Homomorphic Encryption (HE) encrypts the model parameters, enabling secure server-side aggregation. Despite this, the high value of a trained deep neural network poses the threat of malicious clients attempting to steal the model during training. FL watermarking combats this by embedding a secret watermark to protect the model's intellectual property. Yet, embedding watermarks into encrypted parameters from the server side has remained unaddressed—until now. In this paper, we present FedCrypt, the first dynamic white-box watermarking technique compatible with HE in FL. FedCrypt involves training a projection function on the activations of the encrypted model using a trigger set, preserving client privacy and enabling new verification protocols for joint ownership proof between the server and clients without disclosing private information. Our experimental results demonstrate FedCrypt's effectiveness, achieving performance on par with unencrypted models in terms of accuracy and robustness against several attacks.

Fichier principal
Vignette du fichier
IEEE_TDSC___Dynamic_Watermarking_with_HE___First_Submission.pdf (1.86 Mo) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)
Licence

Dates et versions

hal-04663096 , version 1 (26-07-2024)

Licence

Identifiants

Citer

Mohammed Lansari, Reda Bellafqira, Katarzyna Kapusta, Kassem Kallas, Vincent Thouvenot, et al.. FedCrypt: A Dynamic White-Box Watermarking Scheme for Homomorphic Federated Learning. 2024. ⟨hal-04663096⟩
457 Consultations
563 Téléchargements

Altmetric

Partager

  • More