Locally Differentially Private Online Federated Learning With Correlated Noise
Jiaojiao Zhang, Linglingzhi Zhu, Dominik Fay, Mikael Johansson
TL;DR
This work addresses privacy-preserving online federated learning under streaming, non-IID data by introducing locally differentially private learning with temporally correlated noise. It extends matrix factorization (MF) based noise mechanisms to OFL with multiple local updates, and develops a perturbed-iterate analysis to bound the privacy-induced utility loss, yielding a dynamic regret bound for nonconvex losses under $(oldsymbol{rac{ ext{epsilon}}{ ext{delta}}})$-LDP. The authors compare three MF realizations (binary tree, optimized factorization, Toeplitz) and show theoretically and empirically that correlated noise improves privacy-utility trade-offs versus independent noise, with static-regret results under strong convexity complementing the dynamic nonconvex analysis. Numerical experiments on logistic regression and CNNs (MNIST) corroborate the gains, highlighting reduced communication rounds via local updates and robust performance under privacy constraints. These results advance practical, privacy-aware OFL for dynamic, real-time applications like healthcare and recommendations.
Abstract
We introduce a locally differentially private (LDP) algorithm for online federated learning that employs temporally correlated noise to improve utility while preserving privacy. To address challenges posed by the correlated noise and local updates with streaming non-IID data, we develop a perturbed iterate analysis that controls the impact of the noise on the utility. Moreover, we demonstrate how the drift errors from local updates can be effectively managed for several classes of nonconvex loss functions. Subject to an $(ε,δ)$-LDP budget, we establish a dynamic regret bound that quantifies the impact of key parameters and the intensity of changes in the dynamic environment on the learning performance. Numerical experiments confirm the efficacy of the proposed algorithm.
