Differentially Private Federated Learning With Time-Adaptive Privacy Spending
Not on the map. Why?
Abstract (arXiv)
Federated learning (FL) with differential privacy (DP) provides a framework for collaborative machine learning, enabling clients to train a shared model while adhering to strict privacy constraints. The framework allows each client to have an individual privacy guarantee, e.g., by adding different amounts of noise to each client's model updates. One underlying assumption is that all clients spend their privacy budgets uniformly over time (learning rounds). However, it has been shown in the literature that learning in early rounds typically focuses on more coarse-grained features that can be learned at lower signal-to-noise ratios while later rounds learn fine-grained features that benefit from higher signal-to-noise ratios. Building on this intuition, we propose a time-adaptive DP-FL framework that expends the privacy budget non-uniformly across both time and clients. Our framework enables each client to save privacy budget in early rounds so as to be able to spend more in later rounds when additional accuracy is beneficial in learning more fine-grained features. We theoretically prove utility improvements in the case that clients with stricter privacy budgets spend budgets unevenly across rounds, compared to clients with more relaxed budgets, who have sufficient budgets to distribute their spend more evenly. Our practical experiments on standard benchmark datasets support our theoretical results and show that, in practice, our algorithms improve the privacy-utility trade-offs compared to baseline schemes.
Key facts. Cited by 5 papers in the map (data through 7 Oct 2026). Builds on 26 of its 39 references that are in the map. First posted on arXiv 25 Feb 2025.
Builds on
26 of 39 references.
References · 26
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2016Communication-Efficient Learning of Deep Networks from Decentralized Datacited by 7,592
- 2016SGDR: Stochastic Gradient Descent with Warm Restartscited by 4,993
- 2017Fashion-MNIST: a Novel Image Dataset for Benchmarking Machine Learning Algorithmscited by 4,283
- 2019Deep Leakage from Gradientscited by 1,004
- 2020Inverting Gradients -- How easy is it to break privacy in federated learning?cited by 707
- 2019Federated Learning with Differential Privacy: Algorithms and Performance Analysiscited by 528
- 2017Opening the Black Box of Deep Neural Networks via Informationcited by 494
- 2017Differentially Private Federated Learning: A Client Level Perspectivecited by 451
- 2021Opacus: User-Friendly Differential Privacy Library in PyTorchcited by 375
- 2019Differentially Private Learning with Adaptive Clippingcited by 218
- 2018A Hybrid Approach to Privacy-Preserving Federated Learningcited by 208
14 more
- 2019R'enyi Differential Privacy of the Sampled Gaussian Mechanismcited by 199
- 2016Practical Secure Aggregation for Federated Learning on User-Held Datacited by 178
- 2020LDP-Fed: Federated Learning with Local Differential Privacycited by 129
- 2021When the Curious Abandon Honesty: Federated Learning Is Not Privatecited by 126
- 2022FedALA: Adaptive Local Aggregation for Personalized Federated Learningcited by 121
- 2019AdaCliP: Adaptive Clipping for Private SGDcited by 77
- 2020Training Production Language Models without Memorizing User Datacited by 68
- 2022Private Adaptive Optimization with Side Informationcited by 38
- 2022Federated Learning with Sparsified Model Perturbation: Improving Accuracy under Client-Level Differential Privacycited by 32
- 2015Heterogeneous Differential Privacycited by 30
- 2023Have it your way: Individualized Privacy Assignment for DP-SGDcited by 21
- 2022Beyond Uniform Lipschitz Condition in Differentially Private Optimizationcited by 19
- 2019Band-limited Training and Inference for Convolutional Neural Networkscited by 13
- 2024Noise-Aware Algorithm for Heterogeneous Differentially Private Federated Learningcited by 9
Built on by
Citing papers per year: 2025: 3; 2026: 2.
5 papers.
- 2025Optimal Client Sampling in Federated Learning with Client-Level Heterogeneous Differential Privacycited by 1
- 2025Federated Learning with Enhanced Privacy via Model Splitting and Random Client Participationcited by 0
- 2025ALPINE: Closed-Loop Adaptive Privacy Budget Allocation for Mobile Edge Crowdsensingcited by 0
- 2026An Adaptive Differentially Private Federated Learning Frameworkcited by 0
- 2026UMEDA: Unified Multi-modal Efficient Data Fusion for Privacy-Preserving Graph Federated Learning via Spectral-Gated Attention and Diffusion-Based Operator Alignmentcited by 0
- 2026UMEDA: Unified Multi-modal Efficient Data Fusion for Privacy-Preserving Graph Federated Learning via Spectral-Gated Attention and Diffusion-Based Operator Alignment8 May 2026
- 2026An Adaptive Differentially Private Federated Learning Framework6 Feb 2026
- 2025ALPINE: Closed-Loop Adaptive Privacy Budget Allocation for Mobile Edge Crowdsensing20 Oct 2025
- 2025Federated Learning with Enhanced Privacy via Model Splitting and Random Client Participation30 Sep 2025
- 2025Optimal Client Sampling in Federated Learning with Client-Level Heterogeneous Differential Privacy19 May 2025