Daily Arxiv

This is a page that curates AI-related papers published worldwide.
All content here is summarized using Google Gemini and operated on a non-profit basis.
Copyright for each paper belongs to the authors and their institutions; please make sure to credit the source when sharing.

Setup Once, Secure Always: A Single-Setup Secure Federated Learning Aggregation Protocol with Forward and Backward Secrecy for Dynamic Users

Created by
  • Haebom

Author

Nazatul Haque Sultan, Yan Bo, Yansong Gao, Seyit Camtepe, Arash Mahboubi, Hang Thanh Bui, Aufeef Chauhan, Hamed Aboutorab, Michael Bewong, Dineshkumar Singh, Praveen Gauravaram, Rafiqul Islam, Sharif Abuadbba

Outline

This paper proposes a novel secure aggregation protocol for federated learning (FL), a privacy-sensitive application, that enables multiple users to collaboratively train machine learning models without sharing raw data. To overcome the limitations of existing single-configuration protocols, which do not support dynamic user participation and provide strong privacy (forward and backward secrecy), the proposed protocol requires only a single setup operation for the entire FL training, allowing new users to join or leave at any time. It efficiently masks updates without user communication using lightweight symmetric homomorphic encryption and key negation techniques, and protects against model mismatch attacks with a simple verification mechanism using message authentication codes (MACs). Our protocol is the first to combine forward and backward secrecy, dropout resilience, and model integrity verification in a single-configuration design. We present an end-to-end prototype implementation and source code, along with a formal security proof. Experimental results demonstrate that our protocol reduces user-side computation by approximately 99% compared to existing state-of-the-art protocols (e-SeaFL), making it highly practical for real-world FL deployments, especially on resource-constrained devices.

Takeaways, Limitations

Takeaways:
Supports full FL learning with a single setup, significantly reducing communication and computation overhead.
Allows dynamic user engagement (join and leave).
Provides forward and reverse security to achieve strong privacy.
Introducing a model integrity verification mechanism using a message authentication code (MAC).
Improved practicality by reducing user-side computational load by 99% compared to existing cutting-edge protocols.
Provides formal security proofs and open source prototypes.
Limitations:
Limitations, specifically mentioned in the paper, is not presented. Further experiments and analysis may be required to further evaluate its performance and security.
👍