End-to-End Verifiable Decentralized Federated Learning
This addresses the need for secure and trustworthy federated learning in decentralized settings, though it is incremental by extending existing blockchain and ZKP-based methods.
The paper tackles the problem of data corruption before learning in verifiable decentralized federated learning systems by proposing an end-to-end system that ensures integrity and authenticity from the data source, with evaluation showing only marginal overhead compared to state-of-the-art solutions.
Verifiable decentralized federated learning (FL) systems combining blockchains and zero-knowledge proofs (ZKP) make the computational integrity of local learning and global aggregation verifiable across workers. However, they are not end-to-end: data can still be corrupted prior to the learning. In this paper, we propose a verifiable decentralized FL system for end-to-end integrity and authenticity of data and computation extending verifiability to the data source. Addressing an inherent conflict of confidentiality and transparency, we introduce a two-step proving and verification (2PV) method that we apply to central system procedures: a registration workflow that enables non-disclosing verification of device certificates and a learning workflow that extends existing blockchain and ZKP-based FL systems through non-disclosing data authenticity proofs. Our evaluation on a prototypical implementation demonstrates the technical feasibility with only marginal overheads to state-of-the-art solutions.