In recent years, privacy-preserving methods for deep learning have become an urgent problem. Accordingly, we propose the combined use of federated learning (FL) and encrypted images for privacy-preserving image classification under the use of the vision transformer (ViT). The proposed method allows us not only to train models over multiple participants without directly sharing their raw data but to also protect the privacy of test (query) images for the first time. In addition, it can also maintain the same accuracy as normally trained models. In an experiment, the proposed method was demonstrated to well work without any performance degradation on the CIFAR-10 and CIFAR-100 datasets.
翻译:近年来,深层学习的隐私保护方法已成为一个紧迫问题,因此,我们提议在使用视觉变压器(ViT)的情况下,结合使用联合学习和加密图像进行隐私保护图像分类,拟议方法不仅使我们能够在不直接分享原始数据的情况下对多个参与者进行模型培训,而且能够首次保护测试(询问)图像的隐私,此外,还能够保持与通常训练的模型相同的准确性,在一次试验中,所提议方法被证明在不对CIFAR-10和CIFAR-100数据集进行性能退化的情况下运作良好。