Multi-client Functional Encryption for Set Intersection with Non-monotonic Access Structures in Federated Learning
Ruyuan Zhang, Jinguang Han
TL;DR
The paper addresses secure, flexible data access in federated learning by introducing MCFE-SI-NAS, a multi-client functional encryption scheme for set intersection with non-monotonic access structures. It proposes a non-interactive, label-bound encryption framework where multiple clients independently encrypt data and an authorized aggregator computes intersections without learning plaintext, resisting mix-and-match attacks. The authors formalize definitions and security models, provide a concrete construction based on asymmetric prime-order bilinear pairings, prove security in the random oracle model, and implement an efficiency analysis using JPBC on Type-III pairings. This work enables fine-grained, non-interactive access control for encrypted data in FL and provides practical guidance on performance and security trade-offs for real-world deployments.
Abstract
Federated learning (FL) based on cloud servers is a distributed machine learning framework that involves an aggregator and multiple clients, which allows multiple clients to collaborate in training a shared model without exchanging data. Considering the confidentiality of training data, several schemes employing functional encryption (FE) have been presented. However, existing schemes cannot express complex access control policies. In this paper, to realize more flexible and fine-grained access control, we propose a multi-client functional encryption scheme for set intersection with non-monotonic access structures (MCFE-SI-NAS), where multiple clients co-exist and encrypt independently without interaction. All ciphertexts are associated with an label, which can resist "mix-and-match" attacks. Aggregator can aggregate ciphertexts, but cannot know anything about the plaintexts. We first formalize the definition and security model for the MCFE-SI-NAS scheme and build a concrete construction based on asymmetric prime-order pairings. The security of our scheme is formally proven. Finally, we implement our MCFE-SI-NAS scheme and provide its efficiency analysis.
