Return
Providing Differential Privacy for Federated Learning Over Wireless: A Cross-Layer Framework
M
T
A
M
DOI:10.1109/OJVT.2026.3672638.png)
Abstract
En 中文
Federated Learning (FL) is a distributed machine learning framework that inherently allows edge devices to maintain their local training data, thus providing some level of privacy. However, FL’s model updates still pose a risk of privacy leakage, which must be mitigated. Over-the-air FL (OTA-FL) is an adapted FL design for wireless edge networks that leverages the natural superposition property of the wireless medium. We propose a wireless physical layer (PHY) design for OTA-FL which improves differential privacy (DP) through a fully decentralized, dynamic power control strategy that utilizes both inherent Gaussian noise in the wireless channel and a cooperative jammer (CJ) for additional artificial noise generation when higher privacy levels are required. Although primarily implemented within the Upcycled-FL framework, where a resource-efficient method with first-order approximations is used at every even iteration to decrease the required information from clients, our power control strategy is applicable to any FL framework, including FedAvg and FedProx as shown in the paper. This adaptation showcases the flexibility and effectiveness of our design across different learning algorithms while maintaining a strong emphasis on privacy. Our design removes the need for client-side artificial noise injection for DP, improving client transmission efficiency by shifting the privacy-inducing perturbation to a cooperative jammer, which introduces additional system-level energy consumption. Privacy analysis is provided using the Moments Accountant method. We perform a convergence analysis for non-convex objectives to tackle heterogeneous data distributions, highlighting the inherent trade-offs between privacy and accuracy. Numerical results confirm that our approach with different FL algorithms outperforms the state-of-the-art under the same DP conditions on the non-i.i.d. dataset FEMNIST. The results also demonstrate the effectiveness of cooperative jammer in meeting stringent privacy demands. We further extend to imperfect CSI scenarios and show that adaptive power control combined with Upcycled-FL remains robust under channel estimation errors.
Keywords:
Over-the-air federated learning
differential privacy
cooperative jamming
channel noise
artificial noise
power control
AI Summary
Key information extracted from the uploaded paper, including a brief overview, abstract, background, key highlights, visual analysis, and future outlook.
Journal
I
IF:
4.8
Papers:
493
Citations:
987
