Differentially Private Online Federated Learning with Correlated Noise
Jiaojiao Zhang, Linglingzhi Zhu, Mikael Johansson
TL;DR
This work addresses privacy-preserving online federated learning with streaming, non-iid data and adaptive continuous model releases. It introduces temporally correlated differential privacy noise and a perturbed-iterate analysis to bound utility while satisfying $(\epsilon,\delta)$-DP, leveraging matrix-factorization-based noise design to create correlations over time. The analysis yields dynamic regret bounds under QSC and static regret bounds under SC, explicitly characterizing the trade-offs among privacy, communication, and environmental change. Empirical results on logistic regression validate improved utility with reduced communication and demonstrate robustness to varying DP budgets. Overall, the approach advances private OFL by enabling adaptive releases with provable utility-privacy guarantees and practical performance gains.
Abstract
We introduce a novel differentially private algorithm for online federated learning that employs temporally correlated noise to enhance utility while ensuring privacy of continuously released models. To address challenges posed by DP noise and local updates with streaming non-iid data, we develop a perturbed iterate analysis to control the impact of the DP noise on the utility. Moreover, we demonstrate how the drift errors from local updates can be effectively managed under a quasi-strong convexity condition. Subject to an $(ε, δ)$-DP budget, we establish a dynamic regret bound over the entire time horizon, quantifying the impact of key parameters and the intensity of changes in dynamic environments. Numerical experiments confirm the efficacy of the proposed algorithm.
