On hierarchical secure aggregation against relay and user collusion

TL;DR

This paper develops and analyzes hierarchical secure aggregation schemes for federated learning, ensuring privacy against collusion with optimal communication load and key size, through theoretical bounds and network function computation techniques.

Contribution

It introduces new bounds and schemes for hierarchical secure aggregation resilient to collusion, optimizing communication and security in federated learning networks.

Findings

Established fundamental limits on communication load for HSA.

Designed collusion-resilient schemes approaching optimal communication efficiency.

Derived key size bounds and achieved them in cyclic network topologies.

Abstract

Secure aggregation (SA) is fundamental to privacy preservation in federated learning (FL), enabling model aggregation while preventing disclosure of individual user updates. This paper addresses hierarchical secure aggregation (HSA) against relay and user collusion in homogeneous networks, where each user connects to $n$ relays and each relay serves $m$ users. In the two-phase communication framework, users transmit masked data to relays, which then process and forward compiled messages to the server for exact sum recovery. The primary objective is to devise a transmission scheme such that the server can finish the aggregation task, while any group of $T_h$ colluding relays and $T_u$ colluding users cannot reveal any information about the data owned by the non-colluding users. In this study, we establish fundamental limits on the communication load, defined as the ratio of transmitted information size to original data size, for each user-relay link and each relay-server link. Achievable thresholds for collusion resilience are also derived. When the number of colluding relays and users falls below certain critical thresholds, we construct communication-optimal schemes using methods from network function computation. A limitation of these schemes is their reliance on large random keys. To address this, we derive a lower bound on the required key size and prove its achievability in cyclic networks, where users are connected to relays in a cyclic wrap-around manner. By establishing a connection between HSA and network function computation, this work advances the theoretical limits of communication efficiency and information-theoretic security in secure aggregation.