FairnessPrivacyAccountabilitycs.CR
How to Democratise and Protect AI: Fair and Differentially Private Decentralised Deep Learning
Lingjuan Lyu, Yitong Li, Karthik Nandakumar, Jiangshan Yu, Xingjun Ma
July 18, 2020
IEEE Transactions on Dependable and Secure Computing
54 citations
2 influential
Key Takeaways
-
Fairness through reputation systems: The paper introduces a token-based reputation system that tracks each participant's contributions to collaborative AI training, ensuring that parties who contribute high-quality data or computational resources receive fair recognition and benefits—addressing concerns that some participants might free-ride on others' efforts.
-
Privacy protection via differential privacy: The framework uses differential privacy techniques (DPGAN and DPSGD) to add mathematical noise to data and model updates, ensuring that individual participants' sensitive information cannot be reverse-engineered from the final AI model, even if someone gains access to the training process.
-
Decentralized collaboration without a central authority: Unlike traditional AI systems that require a trusted central server, this approach allows multiple organizations or individuals to collaboratively train AI models while maintaining control over their own data—reducing risks associated with data breaches at centralized locations.
-
Comparable performance with added protections: Experimental results show that the fair and privacy-preserving system achieves accuracy levels similar to traditional centralized approaches, suggesting that organizations don't have to sacrifice model quality to gain fairness and privacy protections.
-
Practical framework for real-world scenarios: The two-stage design (initialization and update stages) provides a concrete system that could be implemented across different collaborative settings, making responsible AI practices more accessible beyond academic research.