Privacy‐preserving convolutional neural network prediction with low latency and lightweight users. Issue 1 (31st August 2021)

• Record Type: Journal Article
• Authors: Li, Furong; Chen, Yange; Duan, Pu; Zhang, Benyu; Hong, Zhiyong; Hu, Yupu; Wang, Baocang
• Is Part Of: International journal of intelligent systems. Volume 37:Issue 1(2022)
• Page Start: 568
• Page End: 595
• Publication Date: 2021-08-31
• Subjects: CNN -- homomorphic encryption -- prediction -- privacy preservation -- secret sharing; Artificial intelligence -- Periodicals; Expert systems (Computer science) -- Periodicals; Intelligence artificielle -- Périodiques; Systèmes experts (Informatique) -- Périodiques; 006.3
• DOI: 10.1002/int.22640
• Languages: English
• ISSNs: 0884-8173

Abstract

Abstract: Convolutional neural networks (CNNs) have excellent and extensive applications in image recognition. With the continuous exploitation of data value and the proliferation of machine learning‐as‐a‐service, convolutional neural network prediction schemes on privacy preservation have been introduced one after another, which makes much more attention focused on the privacy leakage and services offered to be efficient and light. Therefore, how to improve the convolutional neural prediction scheme on the premise of privacy preservation turns out to be an imperative research issue. In this paper, we propose a privacy‐preserving convolutional neural network prediction scheme (PCP‐LL) that supports low latency and lightweight users. The scheme starts from the perspective of lossless accuracy from underlying networks. First, we construct a secure activation function computing protocol (SActF) utilizing a commodity‐based secure comparison protocol, which reduces the complexity and latency during the activation function computing under ciphertexts compared with common schemes. Second, to further support lightweight users, we introduce a secure output layer protocol (SOut) that enables users to obtain the prediction results without extra decryption after simple operations. Then, the scheme adopts the distributed two trapdoors public‐key cryptosystem (DT‐PKC) to achieve both data and model security, which well avoids security issues especially such as wiretapping by semi‐honest participants commonly in secret sharing schemes. Finally, through relevant evaluations, the scheme not only achieves privacy preservation and low latency, but also supports lightweight users.