UniHENN: Designing Faster and More Versatile Homomorphic Encryption-based CNNs without im2col (2402.03060v3)
Abstract: Homomorphic encryption (HE) enables privacy-preserving deep learning by allowing computations on encrypted data without decryption. However, deploying convolutional neural networks (CNNs) with HE is challenging due to the need to convert input data into a two-dimensional matrix for convolution using the im2col technique, which rearranges the input for efficient computation. This restricts the types of CNN models that can be used since the encrypted data structure must be compatible with the specific model. UniHENN is a novel HE-based CNN architecture that eliminates the need for im2col, enhancing its versatility and compatibility with a broader range of CNN models. UniHENN flattens input data to one dimension without using im2col. The kernel performs convolutions by traversing the image, using incremental rotations and structured multiplication on the flattened input, with results spaced by the stride interval. Experimental results show that UniHENN significantly outperforms the state-of-the-art 2D CNN inference architecture named PyCrCNN in terms of inference time. For example, on the LeNet-1 model, UniHENN achieves an average inference time of 30.089 seconds, about 26.6 times faster than PyCrCNN's 800.591 seconds. Furthermore, UniHENN outperforms TenSEAL, an im2col-optimized CNN model, in concurrent image processing. For ten samples, UniHENN (16.247 seconds) was about 3.9 times faster than TenSEAL (63.706 seconds), owing to its support for batch processing of up to 10 samples. We demonstrate UniHENN's adaptability to various CNN architectures, including a 1D CNN and six 2D CNNs, highlighting its flexibility and efficiency for privacy-preserving cloud-based CNN services.
- Helib. https://github.com/homenc/HElib, 2022.
- SEAL-Python. https://github.com/Huelse/SEAL-Python, 2023.
- Can we use split learning on 1d cnn models for privacy preserving training? In Proc. of the Asia Conference on Computer and Communications Security (ASIACCS), 2020.
- HeLayers: A Tile Tensors Framework for Large Neural Networks on Encrypted Data. Privacy Enhancing Technology Symposium (PETs) 2023, 2023.
- Openfhe: Open-source fully homomorphic encryption library. In Proc. of the Workshop on Encrypted Computing and Applied Homomorphic Cryptography (WAHC), pages 53–63, 2022.
- Multi-gpu design and performance evaluation of homomorphic encryption on gpu clusters. IEEE Transactions on Parallel and Distributed Systems, 32(2):379–391, 2020.
- Tenseal: A library for encrypted tensor operations using homomorphic encryption, 2021.
- Lattice-based fhe as secure as pke. In Proc. of the Conference on Innovations in Theoretical Computer Science (ITCS), page 1–12. Association for Computing Machinery, 2014.
- Homomorphic encryption for arithmetic of approximate numbers, 2017.
- Faster fully homomorphic encryption: Bootstrapping in less than 0.1 seconds. In Proc. of the International Conference on the Theory and Applications of Cryptology and Information Security (ASIACRYPT), pages 3–33. Springer, 2016.
- Blind-Touch: Homomorphic Encryption-Based Distributed Neural Network Inference for Privacy-Preserving Fingerprint Authentication. In Proceedings of 38th AAAI Conference on Artificial Intelligence (AAAI) (AI for Social Impact Track), 2024.
- Faster cryptonets: Leveraging sparsity for real-world encrypted inference. arXiv preprint arXiv:1811.09953, 2018.
- Chet: an optimizing compiler for fully-homomorphic neural-network inferencing. In Proc. of the ACM SIGPLAN conference on programming language design and implementation (PLDI), pages 142–156, 2019.
- Imagenet: A large-scale hierarchical image database. In Proc. of the Conference on Computer Vision and Pattern Recognition (CVPR), pages 248–255, 2009.
- Li Deng. The mnist database of handwritten digit images for machine learning research. IEEE Signal Processing Magazine, pages 141–142, 2012.
- A privacy-preserving distributed architecture for deep-learning-as-a-service. In Proc. of the International Joint Conference on Neural Networks (IJCNN), pages 1–8. IEEE, 2020.
- Cryptonets: Applying neural networks to encrypted data with high throughput and accuracy. In International conference on machine learning (ICML), pages 201–210, 2016.
- Algorithms in helib. In Proc. of the International Cryptology Conference (CRYPTO), pages 554–571. Springer, 2014.
- Jonathan J. Hull. A database for handwritten text recognition research. IEEE Transactions on Pattern Analysis and Machine Intelligence, pages 550–554, 1994.
- Highly accurate cnn inference using approximate activation functions over homomorphic encryption. In Proc. of the International Conference on Big Data (Big Data), pages 3989–3995, 2020.
- Privacy-preserving artificial intelligence in healthcare: Techniques and applications. Computers in Biology and Medicine, page 106848, 2023.
- Logistic regression model training based on the approximate homomorphic encryption. BMC medical genomics, pages 23–31, 2018.
- Poster: Can we use biometric authentication on cloud?: Fingerprint authentication using homomorphic encryption. In Proc. of the Asia Conference on Computer and Communications Security (ASIACCS), pages 813–815, 2018.
- Efficient privacy-preserving fingerprint-based authentication system using fully homomorphic encryption. Security and Communication Networks, 2020.
- Convolutional neural networks for patient-specific ecg classification. In Proc. of the International Conference of the IEEE Engineering in Medicine and Biology Society (EMBC), pages 2608–2611, 2015.
- Cifar-10 (canadian institute for advanced research).
- Handwritten digit recognition with a back-propagation network. Advances in neural information processing systems, 1989.
- Backpropagation applied to handwritten zip code recognition. Neural computation, pages 541–551, 1989.
- Gradient-based learning applied to document recognition. Proceedings of the IEEE, pages 2278–2324, 1998.
- BlindFilter: Privacy-Preserving Spam Email Detection Using Homomorphic Encryption. In Proceedings of the Symposium on Reliable Distributed Systems (SRDS), 2023.
- PP-GSM: privacy-preserving graphical security model for security assessment as a service. Future Generation Computer Systems, 142:351–363, 2023.
- Optimizations of privacy-preserving dnn for low-latency inference on encrypted data. IEEE Access, 2023.
- Privacy-preserving machine learning with fully homomorphic encryption for deep neural network. IEEE Access, 2022.
- Precise approximation of convolutional neural networks for homomorphically encrypted data. IEEE Access, 2023.
- When machine learning meets privacy: A survey and outlook. ACM Computing Surveys (CSUR), 2021.
- A convnet for the 2020s. In Proceedings of the IEEE/CVF conference on computer vision and pattern recognition (CVPR), pages 11976–11986, 2022.
- Yagisawa Masahiro. Fully homomorphic encryption without bootstrapping. Saarbrücken/Germany: LAP LAMBERT Academic Publishing, 2015.
- The impact of the mit-bih arrhythmia database. IEEE Engineering in Medicine and Biology Magazine, pages 45–50, 2001.
- Lattigo: A multiparty homomorphic encryption library in go. In Proc. of the Workshop on Encrypted Computing and Applied Homomorphic Cryptography (WAHC), pages 64–70, 2020.
- Homomorphic encryption on gpu. IEEE Access, 2023.
- NAVERÂ Cloud Platform. Data Box Frame. https://www.ncloud.com/product/analytics/dataBoxFrame, 2021.
- NAVERÂ Cloud Platform. Server. https://www.ncloud.com/product/compute/server, 2023.
- Yogachandran Rahulamathavan. Privacy-preserving similarity calculation of speaker features using fully homomorphic encryption. arXiv preprint arXiv:2202.07994, 2022.
- Microsoft SEAL (release 4.1). https://github.com/Microsoft/SEAL, January 2023. Microsoft Research, Redmond, WA.
- A distributed deep learning system for web attack detection on edge devices. IEEE Transactions on Industrial Informatics, 16(3):1963–1971, 2019.
- Federated clustering for electricity consumption pattern extraction. IEEE Transactions on Smart Grid, 13(3):2425–2439, 2022.
- Coal resources under carbon peak: Segmentation of massive laser point clouds for coal mining in underground dusty environments using integrated graph deep learning model. Energy, 285:128771, 2023.
- A social emotion classification approach using multi-model fusion. Future Generation Computer Systems, 102:347–356, 2020.
- A review of homomorphic encryption for privacy-preserving biometrics. Sensors, 23(7):3566, 2023.
- Privacy threats and protection in machine learning. In Proc. of the Great Lakes Symposium on VLSI (GLSVLSI), pages 531–536, 2020.
- Adding conditional control to text-to-image diffusion models. In Proceedings of the IEEE/CVF International Conference on Computer Vision (CVPR), pages 3836–3847, 2023.
Sponsor
Paper Prompts
Sign up for free to create and run prompts on this paper using GPT-5.
Top Community Prompts
Collections
Sign up for free to add this paper to one or more collections.