Title: A verifiable and secure DNN classification model over encrypted data

Authors: Weixun Li; Guanghui Sun; Yajun Wang; Long Yuan; Minghui Gao; Yan Dong; Chen Wang

Addresses: State Grid Hebei Electric Power Co., Ltd., Shijiazhuang, Hebei, China ' State Grid Hebei Electric Power Co., Ltd., Shijiazhuang, Hebei, China ' State Grid Hebei Electric Power Co., Ltd., Shijiazhuang, Hebei, China; NARI Group Corporation (State Grid Electronic Power Research Institute), Nanjing, Jiangsu, China ' State Grid Hebei Electric Power Co., Ltd., Shijiazhuang, Hebei, China; NARI Group Corporation (State Grid Electronic Power Research Institute), Nanjing, Jiangsu, China ' Beijing Kedong Electric Power Control System Co., Ltd., Beijing, China; Software College, Northeastern University, Shenyang, Liaoning, China ' Software College, Northeastern University, Shenyang, Liaoning, China ' Software College, Northeastern University, Shenyang, Liaoning, China

Abstract: Outsourcing deep neural networks (DNN) is beneficial to reduce the client overhead, but there are sensitive data privacy issues. However, the existing schemes not only fall short in privacy-preserving and gradient integrity verification, but also fail to perform complex nonlinear operations. In this paper, we design, implement, and evaluate a verifiable and secure DNN classification model over encrypted data (DNNCM-ED), which provides confidentiality and integrity verification simultaneously. Firstly, we propose a new framework in which the client and model training servers jointly train the DNN model to achieve the model training server for aggregation. Secondly, we design secure communication protocols for basic operations, which can be used to construct DNN classification model. Finally, we further devise a verifiable algorithm related to the DNNCM-ED, which provides confidentiality and integrity verification simultaneously. Extensive property and performance analyses indicate that DNNCM-ED is effective, as well as sharing communication and computation overhead of the cloud.

Keywords: deep neural networks; encrypted data; homomorphic encryption.

DOI: 10.1504/IJCSE.2025.147608

International Journal of Computational Science and Engineering, 2025 Vol.28 No.4, pp.471 - 485

Received: 27 Jan 2024
Accepted: 03 Jul 2024
Published online: 24 Jul 2025 *

Full-text access for editors Full-text access for subscribers Purchase this article Comment on this article