# PrivFL: Practical Privacy-preserving Federated Regressions on High-dimensional Data over Mobile Networks

arXiv: https://arxiv.org/abs/2004.02264 · HTML: https://mlsanity.com/paper/2004.02264/

## Key facts

- Cited by 10 papers in the map (data through 14 Oct 2026).
- First posted on arXiv 5 Apr 2020.

## Built on by (most cited first, 10 of 10)

- [From Distributed Machine Learning to Federated Learning: A Survey](https://mlsanity.com/paper/2104.14362/) (2021)
- [Aggregation Service for Federated Learning: An Efficient, Secure, and More Resilient Realization](https://mlsanity.com/paper/2202.01971/) (2022)
- [Citadel: Protecting Data Privacy and Model Confidentiality for Collaborative Learning with SGX](https://mlsanity.com/paper/2105.01281/) (2021)
- [WW-FL: Secure and Private Large-Scale Federated Learning](https://mlsanity.com/paper/2302.09904/) (2023)
- [SPRITE: A Scalable Privacy-Preserving and Verifiable Collaborative Learning for Industrial IoT](https://mlsanity.com/paper/2203.11914/) (2022)
- [ModShift: Model Privacy via Designed Shifts](https://mlsanity.com/paper/2507.20060/) (2025)
- [Federated Coordinate Descent for Privacy-Preserving Multiparty Linear Regression](https://mlsanity.com/paper/2209.07702/) (2022)
- [A Hybrid Federated Kernel Regularized Least Squares Algorithm](https://mlsanity.com/paper/2407.17228/) (2024)
- [Efficiently Achieving Secure Model Training and Secure Aggregation to Ensure Bidirectional Privacy-Preservation in Federated Learning](https://mlsanity.com/paper/2412.11737/) (2024)
- [A Privacy-Centric Approach: Scalable and Secure Federated Learning Enabled by Hybrid Homomorphic Encryption](https://mlsanity.com/paper/2507.14853/) (2025)

## Abstract (arXiv)

Federated Learning (FL) enables a large number of users to jointly learn a shared machine learning (ML) model, coordinated by a centralized server, where the data is distributed across multiple devices. This approach enables the server or users to train and learn an ML model using gradient descent, while keeping all the training data on users' devices. We consider training an ML model over a mobile network where user dropout is a common phenomenon. Although federated learning was aimed at reducing data privacy risks, the ML model privacy has not received much attention. In this work, we present PrivFL, a privacy-preserving system for training (predictive) linear and logistic regression models and oblivious predictions in the federated setting, while guaranteeing data and model privacy as well as ensuring robustness to users dropping out in the network. We design two privacy-preserving protocols for training linear and logistic regression models based on an additive homomorphic encryption (HE) scheme and an aggregation protocol. Exploiting the training algorithm of federated learning, at the core of our training protocols is a secure multiparty global gradient computation on alive users' data. We analyze the security of our training protocols against semi-honest adversaries. As long as the aggregation protocol is secure under the aggregation privacy game and the additive HE scheme is semantically secure, PrivFL guarantees the users' data privacy against the server, and the server's regression model privacy against the users. We demonstrate the performance of PrivFL on real-world datasets and show its applicability in the federated learning system.
