Cross-silo Federated Learning with Record-level Personalized Differential Privacy

Federated learning (FL) enhanced by differential privacy has emerged as a popular approach to better safeguard the privacy of client-side data by protecting clients' contributions during the training process. Existing solutions typically assume a uniform privacy budget for all records and provide one-size-fits-all solutions that may not be adequate to meet each record's privacy requirement. In this paper, we explore the uncharted territory of cross-silo FL with record-level personalized differential privacy. We devise a novel framework named <i>rPDP-FL</i>, employing a two-stage hybrid sampling scheme with both uniform client-level sampling and non-uniform record-level sampling to accommodate varying privacy requirements. A critical and non-trivial problem is how to determine the ideal per-record sampling probability <mml:math xmlns:mml="http://www.w3.org/1998/Math/MathML">mml:miq</mml:mi></mml:math> given the personalized privacy budget <mml:math xmlns:mml="http://www.w3.org/1998/Math/MathML">mml:miε</mml:mi></mml:math> . We introduce a versatile solution named <i>Simulation-CurveFitting</i>, allowing us to uncover a significant insight into the nonlinear correlation between <mml:math xmlns:mml="http://www.w3.org/1998/Math/MathML">mml:miq</mml:mi></mml:math> and <mml:math xmlns:mml="http://www.w3.org/1998/Math/MathML">mml:miε</mml:mi></mml:math> and derive an elegant mathematical model to tackle the problem. Our evaluation demonstrates that our solution can provide significant performance gains over the baselines that do not consider personalized privacy preservation.