33751fd6777832c4.tex
1: \begin{abstract}
2: \Ac{fl} is an emerging paradigm for training machine learning models using possibly private data available at edge devices. The distributed operation of FL gives rise to challenges that are not encountered in centralized machine learning, including the need to preserve the privacy of the local datasets, and  the communication load due to the repeated exchange of updated models. These challenges are often tackled individually via techniques that induce some distortion on the updated models, e.g., \ac{ldp} mechanisms and lossy compression. In this work we propose a method coined {\em \ac{jopeq}}, which jointly implements lossy compression and privacy enhancement in \ac{fl} settings. In particular, \ac{jopeq} utilizes vector quantization based on random lattice, a universal compression technique whose byproduct distortion is statistically equivalent to additive noise. This distortion is leveraged to enhance privacy by augmenting the model updates with dedicated multivariate \acl{ppn}. We show that \ac{jopeq} simultaneously quantizes data according to a required bit-rate while holding a desired privacy level, without notably affecting the utility of the learned model. This is shown via analytical \ac{ldp} guarantees, distortion and convergence bounds derivation, and numerical studies. Finally, we empirically assert that \ac{jopeq} demolishes common attacks known to exploit privacy leakage.
3: \end{abstract}
4: