2026· International Conference on Security and Cryptography· pp. 871-878· 0 citations· 35 references
Computer Science
TL;DR
ORCHID-FL is proposed, an on-device, language-mediated privacy agent that combines tag-grounded perception, a promptable LLM that proposes sharing decisions, and a deterministic rule engine that retains final authority to adapt to evolving social and institutional norms without centralising sensitive data.
Abstract
: Mobile devices store highly sensitive personal data, yet privacy failures often arise not from technical compromise but from mismatches between user intent and sharing interfaces that offer little contextual nuance. We propose ORCHID-FL, an on-device, language-mediated privacy agent that combines tag-grounded perception, a promptable LLM that proposes sharing decisions, and a deterministic rule engine that retains final authority. To allow the agent to adapt to evolving social and institutional norms without centralising sensitive data, ORCHID-FL is designed to participate in a federated fine-tuning loop using parameter-efficient (LoRA-style) updates. We position this paper as an architectural proposal: we present the system design, a hybrid LLM + deterministic-rule decision pipeline, and a threat model that treats the LLM and the federation channel as untrusted. We provide preliminary empirical evidence on the perception layer by comparing CNN-tag, multimodal-tag, and end-to-end multimodal architectures on 200 VizWiz-Priv images annotated by the author, and find that structured tag-grounded pipelines achieve the highest decision agreement and the lowest unintended disclosure rate. Federated fine-tuning evaluation, multi-annotator validation, and quantification of the differential-privacy/utility trade-off are deferred to future work.
PADP is presented, a sensitivity-aware perturbation framework inspired by differential privacy principles, which provides a plug-and-play, middleware framework that can be easily integrated into enterprise RAG pipelines without requiring costly computations for LLM fine-tuning and reconstruction of vector indices.
Seçkin Mandaci, Yılmaz Vural, Ö. Turna· Black Sea Journal of Enginee...· 0 citations
SmartRAG is presented, a fully on-device framework that organizes an intelligent assistant around four coordinated modules -- Perception, Memory, Focus, and Thinking -- keeping inference costs bounded and at the core of EvoNER, a continually learnable named-entity recognizer that incrementally expands its label inventory through teacher-distilled updates.
Zhihan Jiang, Meng Li, Shenghao Liu et al.· arXiv.org· 0 citations
Cloud-local LLM inference systems have the potential to use the reasoning capability of large cloud models while protecting sensitive user data on personal devices. Cloud-bound requests must exclude personally identifiable information (PII) to prevent external data leakage. Existing privacy-preserving methods rely on prompt perturbation, entity masking, or model fine-tuning, but these approaches may distort contextual semantics or require additional training. This paper proposes P2Skill, a prompt-based skill distillation method in which a local small language model (SLM) autonomously performs decomposition, PII-aware routing, paraphrasing, and reconstruction by following the skill prompts. Skills are iteratively refined from execution failures by a cloud LLM, enabling the local SLM to generalize beyond memorized PII patterns, and therefore P2Skill requires no privacy-specific fine-tuning or learned auxiliary detectors. Evaluation on a four-domain benchmark shows that P2Skill achieves $1.69\times$ and $3.66\times$ higher privacy-preserved inference quality than previous baselines.
M. Ryu, Geunpyo Park, Sungjoon Lee et al.· 0 citations
Accurate state-of-charge (SOC) prediction on personal mobile devices requires a model that can represent heterogeneous discharge mechanisms, transfer knowledge across users, and adapt from scarce target records while raw telemetry remains privacy isolated. This study proposes a module-decomposition-driven SOC prediction model that separates baseline drain, synchronous state response, and asynchronous multi-scale event memory within one discharge-dynamics formulation. The same three semantic coefficient blocks remain aligned through local source learning and round-wise sample-count-weighted federated aggregation. Target-side personalization then adjusts one locally derived personal discharge-rate scalar while preserving the shared temporal response, and forward SOC propagation produces threshold-based time-to-empty (TTE) estimates. A user-held-out evaluation on a public small-sample smartphone-log dataset uses eight target partitions and 447 final evaluation origins. Personalized fine-tuning reduced TTE MAE by 67.07% and RMSE by 71.88%, yielding an R2 of 0.936. The resulting task-specific architecture connects module-structured data processing, federated synthesis, few-shot adaptation, and local TTE inference while raw usage logs remain within user-specific data boundaries.
Retail search systems serve diverse geographic regions with distinct query patterns, vocabularies, and product preferences, creating significant data heterogeneity that challenges both privacy-preserving training and model personalization. Federated learning offers a natural solution for privacy, but standard FL methods produce global models that sacrifice regional performance, while existing personalized FL approaches operate at the parameter level and catastrophically collapse on modern transformers (below 10\% accuracy on T5) due to tied embeddings and LayerNorm interactions. We introduce RegionFed, an \textit{architecture-robust} federated learning framework that sidesteps this failure by operating entirely at the gradient level. RegionFed uses the $\ell_2$ conflict between regional and global gradients as a unified signal that (i) diagnoses heterogeneity, (ii) routes each region to the cheapest sufficient personalization strategy, and (iii) adaptively controls personalization strength. Because it treats models as differentiable black boxes, RegionFed deploys on T5-Small, T5-3B, RoBERTa, and CNN with zero code changes, providing large gains on transformers (where parameter-level methods collapse) and consistent improvements on CNNs. Across three public datasets (Amazon ESCI, Amazon Reviews, LEAF-FEMNIST) and four architectures, RegionFed-Meta achieves 92.27\%, closing the gap to the privacy-violating centralized upper bound (Centralized + Regional Weighting: 92.04\%, $\Delta$=0.23pp, within 1$\sigma$) while providing $(\epsilon{\approx}0.60)$-differential privacy and $\mathcal{O}(1/\sqrt{T})$ convergence.
Quoc H. Nguyen, Ali Lafzi, Abhijeet Phatak et al.· 0 citations