Skip to content

FedDP-PALD: A Privacy-Preserving Federated Latent Diffusion Framework with Prototype Aggregation for Medical Data Synthesis

Jul 2026 · arXiv.org · Vol abs/2607.16300 · 0 citations · 55 references
Computer Science

TL;DR

Results show that FedDP-PALD generates private synthetic representations that preserve useful decision performance while strongly resisting membership inference, and introduces Differentially Private Prototype Mixture Aggregation (DP-PMA), which clips class-level latent prototypes and adds calibrated Gaussian noise before combining them on the server to maintain differential privacy.

Abstract

Medical images and physiological signals provide valuable information for accurate diagnosis. Developing diagnostic models often requires patient data from multiple institutions, although strict privacy regulations limit the sharing of sensitive clinical records. Federated learning enables multiple hospitals to train a shared model without exchanging raw data. However, existing methods face two problems: the information exchanged during training can reveal whether a patient's data were used, and synthetic data meant to replace real records often fail to preserve their predictive structure, which limits clinical use. To address this issue, we propose FedDP-PALD, a privacy-preserving federated latent diffusion framework for multimodal medical data synthesis under formal privacy guarantees. It jointly processes chest X-ray images and electrocardiogram (ECG) signals through gated multi-head attention with modality-availability masks, remaining effective even when a modality is missing. We also introduce Differentially Private Prototype Mixture Aggregation (DP-PMA), which clips class-level latent prototypes and adds calibrated Gaussian noise before combining them on the server to maintain $(\epsilon, \delta)$ differential privacy. We evaluate FedDP-PALD on PneumoniaMNIST, ChestMNIST, and MIT-BIH datasets, where differential privacy reduced summary-level attack AUROC from 0.6229 $\pm$ 0.0026 to between 0.5016 and 0.5093 for privacy budgets from $\epsilon = 1$ to $\epsilon = 8$. On the test data, synthetic-latent training achieved an F1 score of 0.8993 $\pm$ 0.0006 and an AUROC of 0.9057 $\pm$ 0.0503, close to the 0.9747 $\pm$ 0.0132 real-latent training. These results show that FedDP-PALD generates private synthetic representations that preserve useful decision performance while strongly resisting membership inference.

View source

Similar papers

#artificial intelligence Preprint Sep 2026

Privacy-Preserving Heterogeneous Multi-LLM Federated Inference for Cognitive Diagnosis

Significant challenges remain in AI-driven educational systems in balancing privacy preservation with accurate cognitive diagnosis. To overcome this, we propose a federated inference framework in which several commercial LLM APIs collaborate without requiring access to raw student data or proprietary model internals. Using multiple federated entities, such as LLaMA-3.3-70B, GPT-4o-mini, and Claude-3-Haiku, our framework builds upon a heterogeneous multi-LLM architecture. The predictions generated by these entities are combined with epsilon-local differential privacy by adding Laplace noise locally to each entity's prediction output before aggregation, while residual-based aggregation mitigates model heterogeneity. Our approach is predicated on an honest-but-curious trust paradigm in which API providers are presumed not to abuse submitted queries, and our differential privacy mechanism shields the published diagnostic results from external inference. We conduct rigorous privacy-utility analysis showing strong privacy guarantees with minimal accuracy loss, and extensive real-world evaluations across three educational benchmarks confirm the framework's practical usability and cross-domain generalizability.

Yagna Manasa Boyapati, Chong Yu, Tian-Yu Jiang et al. · 0 citations
Open access Aug 2026

Regulatory-orientedDeep federated learning framework for multi-hospital medical imaging: privacy-preserving, explainable, and generalizable diagnosis

The proposed FL framework provides a privacy-preserving, explainable, and computationally efficient solution for collaborative AI in medical imaging by combining adaptive federated learning, secure privacy mechanisms, and explainable AI techniques, demonstrating strong potential for deployment in multi-hospital clinical environments.

Chandra Shakher Tyagi, Partheeban Nagappan, T. R · 0 citations
Open access Aug 2026

FedSCF: sensitivity-aware collaborative fusion for personalized federated learning in medical image classification

A PFL framework, FedSCF, which models client heterogeneity at the parameter level, including a relative perturbation-based sensitivity evaluation is designed to identify critical parameters for personalized modeling, while the remaining parameters participate in cross-client sharing.

Mingjun Wei, Rongyang Xu, Qian Zhang et al. · 0 citations
Open access Aug 2026

PPFedKD: Privacy‐Preserving Federated Learning and Adaptive Contrastive Distillation for Medical Image Diagnosis

Experimental results on diabetic retinopathy and breast cancer pathology datasets demonstrate that PPFedKD outperforms baseline methods in classification accuracy, privacy protection, and communication efficiency, providing a secure and effective solution for medical image classification.

Lei Yuan, Yaohua Luo, Mei Feng · 0 citations
Open access Aug 2026

Hybrid Differentially Private Conditional Diffusion for Synthetic EHR Generation in Medical IoT Environments

Privacy-preserving synthesis of electronic health records is difficult because clinical data combine continuous measurements, categorical diagnoses, class imbalance, missingness, and multiple trust boundaries. PrivMedSynth is presented as a conditional diffusion framework for mixed type tabular health records in Medical Internet of Things edge cloud environments. The framework applies a local randomizer before transmission and trains a conditional diffusion model with differentially private stochastic gradient descent in the cloud. Continuous features are perturbed with a calibrated Gaussian mechanism, categorical variables are protected with generalized randomized response, and clinical conditions are used as explicit generation controls. Rényi differential privacy accounts for repeated cloud updates and is converted to an approximate differential privacy guarantee. The revised formulation distinguishes the formal privacy guarantee from empirical membership inference performance and makes the privacy unit, adjacency relation, modality budget, and noise parameterization explicit. The experiments report a total variation distance of 0.041, a downstream AUROC of 0.884, and a membership inference AUROC of 0.503 on MIMIC III. These utility and attack results remain conditional on the stated preprocessing and require reproduction under the corrected accounting before being interpreted as a final end to end guarantee. The framework provides a principled basis for studying the privacy and utility tradeoff in distributed synthetic clinical data generation.

Yamuna Mundru, Manas Kumar Yogi · 0 citations

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.