1: \begin{abstract}

2: Average consensus underpins key functionalities of distributed

3: systems ranging from distributed information fusion,

4: decision-making, distributed optimization, to load balancing and

5: decentralized control. Existing distributed average  consensus

6: algorithms require each node to exchange and disclose  state

7: information to its neighbors,  which is undesirable in cases where

8: the state is private or contains sensitive information. In this

9: paper, we propose a novel approach that avoids disclosing individual

10: state information in  average consensus  by letting each node

11: decompose its state into two sub-states. For each node, one of the

12: two sub-states   involves in computation and inter-node interactions

13: as if it were the original state, while the other sub-state

14: interacts only   with the first sub-state of the same node, being

15: completely invisible to other nodes. The initial values of the two

16: sub-states are chosen randomly but with their mean   fixed to the

17: initial value of the original state, which is key to guarantee

18: convergence to the desired consensus value. In direct contrast to

19: differential-privacy based privacy-preserving average-consensus

20: approaches which enable privacy by compromising accuracy in the

21: consensus value, the proposed approach can guarantee convergence to

22: the \emph{exact} desired value without any error. Not only is the

23: proposed approach able to prevent  the disclosure of a node's

24: initial state   to   honest-but-curious neighbors,  it can also

25: provide protection against inference by  external eavesdroppers able

26: to wiretap communication links.   Numerical simulations demonstrate

27: the effectiveness of the approach and   its advantages   over

28: state-of-the-art counterparts.

29: \end{abstract}

30: