Understanding the Resource Cost of Fully Homomorphic Encryption in Quantum Federated Learning

TL;DR

This work implemented various QML models including a Quantum Convolutional Neural Network trained in a federated environment with parameters encrypted using the CKKS scheme, marking the first QCNN trained in a federated setting with CKKS-encrypted parameters.

Abstract

Quantum Federated Learning (QFL) enables distributed training of Quantum Machine Learning (QML) models by sharing model gradients instead of raw data. However, these gradients can still expose sensitive user information. To enhance privacy, homomorphic encryption of parameters has been proposed as a solution in QFL and related frameworks. In this work, we evaluate the overhead introduced by Fully Homomorphic Encryption (FHE) in QFL setups and assess its feasibility for real-world applications. We implemented various QML models including a Quantum Convolutional Neural Network (QCNN) trained in a federated environment with parameters encrypted using the CKKS scheme. This work marks the first QCNN trained in a federated setting with CKKS-encrypted parameters. Models of varying architectures were trained to predict brain tumors from MRI scans. The experiments reveal that memory and communication overhead remain substantial, making FHE challenging to deploy. Minimizing overhead requires reducing the number of model parameters, which, however, leads to a decline in classification performance, introducing a trade-off between privacy and model complexity.

Figures (2)

• Figure 1: Overview of a QFL setup utilizing FHE for parameter encryption.
• Figure 2: central party CPU usage over two exemplary runs: FHE-cnn and Standard-cnn. Each step on the x-axis represents a data point where the metric was recorded during the training process.