A hybrid privacy-preserving scheme that integrates Threshold Fully Homomorphic Encryption (ThFHE) and Multi-Key Fully Homomorphic Encryption (MKFHE) and effectively achieves collaborative model training while maintaining security at the privacy protection level and supporting seamless vehicle mobility is proposed.
Abstract
With the rapid evolution of 5G communications, artificial intelligence, and new energy technologies, intelligent driving has become a pivotal component of modern transportation infrastructure. However, the openness and inherent complexity of the Internet of Vehicles (IoV) pose significant challenges to data privacy and security. While Federated Learning (FL) facilitates collaborative training of data models without requiring raw data to leave local devices, its centralized aggregation architecture struggles to address privacy concerns in cross-trust domain collaborations and fails to effectively handle the challenges posed by vehicle node mobility. In this paper, we investigate cross-trust domain collaborative federated learning within the IoV and construct a privacy-preserving Cloud-Edge-End architecture based on Fully Homomorphic Encryption (FHE). To address the dynamic nature of vehicle nodes, we propose a hybrid privacy-preserving scheme that integrates Threshold Fully Homomorphic Encryption (ThFHE) and Multi-Key Fully Homomorphic Encryption (MKFHE). The experimental results indicate that the proposed collaborative architecture is theoretically reasonable. In addition, the scheme effectively achieves collaborative model training while maintaining security at the privacy protection level and supporting seamless vehicle mobility.
Decentralized Federated Learning (DFL) enables collaborative artificial intelligence model training without centralizing sensitive data, making it suitable for privacy-critical and distributed intelligent systems such as healthcare, Industrial IoT, and smart digital infrastructure. Despite its advantages, DFL remains vulnerable to privacy leakage through shared model updates and to model poisoning and backdoor attacks that compromise system reliability, robustness, and trustworthiness. Existing defense mechanisms primarily address either privacy preservation or poisoning robustness independently and often exhibit limited effectiveness under adaptive or high-ratio adversarial settings. This work proposes a trustworthy and privacy-preserving decentralized federated learning framework that jointly addresses these challenges through two integrated components: (i) a hybrid privacy mechanism based on public dataset pretraining followed by differentially private fine-tuning, and (ii) a multi-layer model defense architecture designed to mitigate poisoning and backdoor attacks across decentralized peer-to-peer environments. The framework integrates local data sanitization, peer-side model verification, robust trimmed-mean aggregation, and runtime inference protection to provide defense-in-depth across both training-time and inference-time attack surfaces. An adversary model and operational assumptions are formally defined, and the framework is evaluated under strong adversarial conditions, including a 20% poisoning ratio. Experimental results demonstrate consistent robustness improvements over a vanilla DFL baseline. While the baseline model achieves a clean accuracy of 83.10%, the proposed framework improves clean performance to 86.12%. Under adversarial conditions, accuracy improves from 37.71% to 53.88% for Fast Gradient Sign Method (FGSM) attacks, from 21.75% to 46.40% for Projected Gradient Descent (PGD) attacks, and from 40.62% to 67.35% for Carlini–Wagner (CW) attacks. For backdoor-based poisoning attacks such as BadNets and Blended attacks, the defense pipeline restores model accuracy to above 86% while maintaining stable benign performance. These findings demonstrate that the proposed framework provides an effective balance between privacy preservation, adversarial robustness, and trustworthy decentralized collaborative learning for secure AI-driven systems.
Durga Sivan, Uma Maheshwari Shanmugam, Sachnev Vasily et al.· Discover Artificial Intellig...· 0 citations
This paper presents a structured review of privacy-preserving data processing techniques for cloud environments built on HE and FL, individually and in hybrid combination, and identifies promising directions for future research.
Shivendra Shukla, C. S. Gautam, Divyansh Tiwari· International Journal of Cre...· 0 citations
Federated learning is a technology that is used to protect data privacy in machine learning. Nonetheless, in federated learning, updating the global model requires the use of gradient descent algorithm, which involves multiple rounds of interaction between entities to complete the iterative updates, inevitably incurring massive computational and communication overhead. In 2020, Wang et al. first proposed a non-interactive federated regression scheme, which effectively improves the training efficiency of regression models while protecting the privacy of local training data. However, like most current federated regressions, it involves a third authority (TA) to generate keys for each entity, which poses a significant privacy risk and results in considerable communication overhead. From the view of security and practicality, this paper first proposes a multi-party homomorphic encryption algorithm named MPaillier. Furthermore, we have designed PNFR, a privacy-preserving federated learning scheme for regressions training built on the MPaillier algorithm. The participating entities of PNFR are the data owners and a cloud server, eliminating the need for a TA, thus enhancing the practicality and efficiency of the scheme. Experimental results demonstrate that our scheme is $\sim 10^{3}$ times faster than interactive federated regressions PrivFL and about 80% faster than non-interactive federated regressions VANE.
Deep learning is becoming popular in cloud applications and serves to provide intelligent services; data aggregation in a central location makes sensitive information vulnerable to privacy breaches, regulatory infractions, and adversarial manipulation. All modern privacy mechanisms offer partial protection and frequently lack accuracy, scalability, or practicality in their operations. To overcome these limitations, a federated deep learning model is formulated so that secure joint learning can occur without transferring raw data across the domains of ownership. The framework incorporates training that is decentralized, training that uses differential privacy, training that uses secure aggregation, training that uses encrypted communication, and training that uses trust-based anomaly defense to defend against leakage, poisoning, and inference attacks. It also supports heterogeneous and highly non-IID datasets using adaptive coordination and stability-relevant participation regulation and meets emerging data protection requirements. The methods of resource-conscious orchestration and the optimization of communication eliminate overhead without obstructing the effectiveness of learning. The paradigm has therefore formed a privacy-by-design intelligent cloud ecosystem which ensures confidentiality, maintains performance, enhances robustness, and ensures responsible AI implementation in privacy-related sectors of healthcare, finance, governance, and smart infrastructure.
Sribidhya Mohanty, Pallavi Gupta, Anil Pratap Singh et al.· 2026 International Conferenc...· 0 citations
A Federated Learning and LLM-Driven Threat Intelligence for Zero Trust IoT Architecture is presented, with FL for anomaly detection integrating privacy-preserving distributed learning, continuous identity verification, and LLM-driven autonomous threat response into a unified pipeline.
In this paper, we recommend an Onion Routing framework powered by federated learning and augmented with E91-based quantum key distribution (QKD) to protect next-generation communication systems like 5G-supported satellite and spaceborne IoT networks. Conventional encryption techniques protect message content but are still susceptible to traffic analysis and developing quantum attacks, necessitating layered, robust protection. In the suggested solution, locally on resourcelimited nodes, lightweight intrusion detection models are trained, whereas just onion-encrypted updates are shared for global aggregation, while keeping privacy intact and bandwidth usage minimum. Onion Routing offers multi-layer anonymity against adversarial eavesdropping, and QKD gives quantum-resilient key distribution immune to cryptanalytic attacks. Experimental testing on the X-IIoTID dataset indicates that the framework records a global accuracy of 98.03% with a loss of 0.0567, which confirms its effectiveness in identifying distributed denial-of-service (DDoS) attacks. Through decentralized intelligence, anonymity, and quantum-level security, this research sets the stage for a scalable and future-proof communication model for vital spaceborne applications.
Samiksha Gharmalkar, Bhavya Vora, Lakshin Pathak et al.· 2026 IEEE International Work...· 0 citations
We use cookies to run the site and, with your consent, for analytics and to show ads.
See our Cookie Policy.
