Trustformer: A Trusted Federated Transformer

TL;DR

This paper presents a privacy-preserving federated learning method for Transformers that reduces communication costs by transmitting layer centroids instead of full weights, maintaining high utility and enhancing security.

Contribution

It introduces a novel federated learning approach that uses clustering to simulate global Transformer models locally, reducing communication overhead and improving privacy.

Findings

Achieves comparable utility to state-of-the-art methods.

Significantly reduces communication costs.

Enhances security with Intel SGX.

Abstract

Transformers, a cornerstone of deep-learning architectures for sequential data, have achieved state-of-the-art results in tasks like Natural Language Processing (NLP). Models such as BERT and GPT-3 exemplify their success and have driven the rise of large language models (LLMs). However, a critical challenge persists: safeguarding the privacy of data used in LLM training. Privacy-preserving techniques like Federated Learning (FL) offer potential solutions, but practical limitations hinder their effectiveness for Transformer training. Two primary issues are (I) the risk of sensitive information leakage due to aggregation methods like FedAvg or FedSGD, and (II) the high communication overhead caused by the large size of Transformer models. This paper introduces a novel FL method that reduces communication overhead while maintaining competitive utility. Our approach avoids sharing full model weights by simulating a global model locally. We apply k-means clustering to each Transformer layer, compute centroids locally, and transmit only these centroids to the server instead of full weights or gradients. To enhance security, we leverage Intel SGX for secure transmission of centroids. Evaluated on a translation task, our method achieves utility comparable to state-of-the-art baselines while significantly reducing communication costs. This provides a more efficient and privacy-preserving FL solution for Transformer models.