mlsanityData to 14 Oct 2026

Privacy-Preserving Federated Embedding Learning for Localized Retrieval-Augmented Generation

arXiv 2504.19101 ↗First posted 27 Apr 2025cs.CLcited by 8

On the map: Retrieval-augmented generation → Privacy and security of RAG

Abstract (arXiv)

Retrieval-Augmented Generation (RAG) has recently emerged as a promising solution for enhancing the accuracy and credibility of Large Language Models (LLMs), particularly in Question & Answer tasks. This is achieved by incorporating proprietary and private data from integrated databases. However, private RAG systems face significant challenges due to the scarcity of private domain data and critical data privacy issues. These obstacles impede the deployment of private RAG systems, as developing privacy-preserving RAG systems requires a delicate balance between data security and data availability. To address these challenges, we regard federated learning (FL) as a highly promising technology for privacy-preserving RAG services. We propose a novel framework called Federated Retrieval-Augmented Generation (FedE4RAG). This framework facilitates collaborative training of client-side RAG retrieval models. The parameters of these models are aggregated and distributed on a central-server, ensuring data privacy without direct sharing of raw data. In FedE4RAG, knowledge distillation is employed for communication between the server and client models. This technique improves the generalization of local RAG retrievers during the federated learning process. Additionally, we apply homomorphic encryption within federated learning to safeguard model parameters and mitigate concerns related to data leakage. Extensive experiments conducted on the real-world dataset have validated the effectiveness of FedE4RAG. The results demonstrate that our proposed framework can markedly enhance the performance of private RAG systems while maintaining robust data privacy protection.

Key facts. Cited by 8 papers in the map (data through 14 Oct 2026). Placed in Privacy and security of RAG, one of 15 directions in Retrieval-augmented generation. Builds on 69 of its 98 references that are in the map. First posted on arXiv 27 Apr 2025.

Builds on

69 of 98 references.

Closest ancestors · 6

Same direction, newest first

  1. 2024C-FedRAG: A Confidential Federated Retrieval-Augmented Generation System17 Dec
  2. 2024Feedback-Guided Extraction of Knowledge Base from Retrieval-Augmented LLM Applications21 Nov
  3. 2024Is My Data in Your Retrieval Database? Membership Inference Attacks Against Retrieval Augmented Generation30 May
  4. 2024Follow My Instruction and Spill the Beans: Scalable Data Extraction from Retrieval-Augmented Generation Systems27 Feb
  5. 2024The Good and The Bad: Exploring Privacy Issues in Retrieval-Augmented Generation (RAG)23 Feb
  6. 2024Pandora: Jailbreak GPTs by Retrieval Augmented Generation Poisoning13 Feb

Other references · 63

  1. 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,399
  2. 2020A Simple Framework for Contrastive Learning of Visual Representationscited by 12,049
  3. 2020Retrieval-Augmented Generation for Knowledge-Intensive NLP Taskscited by 9,297
  4. 2018Representation Learning with Contrastive Predictive Codingcited by 7,777
  5. 2016Communication-Efficient Learning of Deep Networks from Decentralized Datacited by 7,669
  6. 2019Momentum Contrast for Unsupervised Visual Representation Learningcited by 7,513
  7. 2013Efficient Estimation of Word Representations in Vector Spacecited by 4,375
  8. 2021On the Opportunities and Risks of Foundation Modelscited by 4,033
  9. 2020Dense Passage Retrieval for Open-Domain Question Answeringcited by 3,824
  10. 2022Training Compute-Optimal Large Language Modelscited by 3,019
  11. 2018Deep contextualized word representationscited by 2,290
  12. 2020Extracting Training Data from Large Language Modelscited by 2,189
38 more
  1. 2021SimCSE: Simple Contrastive Learning of Sentence Embeddingscited by 2,173
  2. 2020REALM: Retrieval-Augmented Language Model Pre-Trainingcited by 2,141
  3. 2022Survey of Hallucination in Natural Language Generationcited by 2,075
  4. 2023Self-RAG: Learning to Retrieve, Generate, and Critique through Self-Reflectioncited by 1,839
  5. 2016Federated Learning: Strategies for Improving Communication Efficiencycited by 1,475
  6. 2021Improving language models by retrieving from trillions of tokenscited by 1,293
  7. 2019On the Convergence of FedAvg on Non-IID Datacited by 1,229
  8. 2020Leveraging Passage Retrieval with Generative Models for Open Domain Question Answeringcited by 1,210
  9. 2024M3-Embedding: Multi-Linguality, Multi-Functionality, Multi-Granularity Text Embeddings Through Self-Knowledge Distillationcited by 1,073
  10. 2020Adaptive Federated Optimizationcited by 1,046
  11. 2020Ensemble Distillation for Robust Model Fusion in Federated Learningcited by 682
  12. 2021Federated Learning on Non-IID Data Silos: An Experimental Studycited by 568
  13. 2023Active Retrieval Augmented Generationcited by 516
  14. 2023Ragas: Automated Evaluation of Retrieval Augmented Generationcited by 418
  15. 2023Scaling Data-Constrained Language Modelscited by 403
  16. 2016Semi-supervised Knowledge Transfer for Deep Learning from Private Training Datacited by 348
  17. 2022Deduplicating Training Data Mitigates Privacy Risks in Language Modelscited by 314
  18. 2023FinanceBench: A New Benchmark for Financial Question Answeringcited by 270
  19. 2024MultiHop-RAG: Benchmarking Retrieval-Augmented Generation for Multi-Hop Queriescited by 257
  20. 2025Agentic Retrieval-Augmented Generation: A Survey on Agentic RAGcited by 249
  21. 2018Communication-Efficient On-Device Machine Learning: Federated Distillation and Augmentation under Non-IID Private Datacited by 243
  22. 2023Text Embeddings Reveal (Almost) As Much As Textcited by 192
  23. 2021FedKD: Communication Efficient Federated Learning via Knowledge Distillationcited by 187
  24. 2020Generation-Augmented Retrieval for Open-domain Question Answeringcited by 186
  25. 2024Retrieval-Augmented Generation with Graphs (GraphRAG)cited by 172
  26. 2018Large scale distributed neural network training through online distillationcited by 146
  27. 2022Rethinking with Retrieval: Faithful Large Language Model Inferencecited by 145
  28. 2020Distillation-Based Semi-Supervised Federated Learning for Communication-Efficient Collaborative Training with Non-IID Private Datacited by 125
  29. 2019Towards Visually Explaining Variational Autoencoderscited by 113
  30. 2023Federated Learning for Generalization, Robustness, Fairness: A Survey and Benchmarkcited by 99
  31. 2023Sentence Embedding Leaks More Information than You Expect: Generative Embedding Inversion Attack to Recover the Whole Sentencecited by 81
  32. 2024Risk Taxonomy, Mitigation, and Assessment Benchmarks of Large Language Model Systemscited by 66
  33. 2022FiD-Light: Efficient and Effective Retrieval-Augmented Text Generationcited by 63
  34. 2023Privacy-Preserving In-Context Learning for Large Language Modelscited by 50
  35. 2021FedGEMS: Federated Learning of Larger Server Models via Selective Knowledge Fusioncited by 49
  36. 2023FedML-HE: An Efficient Homomorphic-Encryption-Based Privacy-Preserving Federated Learning Systemcited by 38
  37. 2023In ChatGPT We Trust? Measuring and Characterizing the Reliability of ChatGPTcited by 37
  38. 2022Multi-Level Branched Regularization for Federated Learningcited by 34

50 most cited of 63 All 63 (JSON)

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 2; 2026: 6.

8 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2025Federated Retrieval-Augmented Generation: A Systematic Mapping Study
  2. 2026Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems
  3. 2024Privacy-Preserving Retrieval-Augmented Generation with Differential Privacy
  4. 2025Privacy-Aware RAG: Secure and Isolated Knowledge Retrieval
  5. 2026Towards Secure Retrieval-Augmented Generation: A Comprehensive Review of Threats, Defenses and Benchmarks
  6. 2025Private-RAG: Answering Multiple Queries with LLMs while Keeping Your Data Private
  7. 2024RemoteRAG: A Privacy-Preserving LLM Cloud RAG Service
  8. 2026FedMosaic: Federated Retrieval-Augmented Generation via Parametric Adapters