Privacy-Preserving Federated Embedding Learning for Localized Retrieval-Augmented Generation
On the map: Retrieval-augmented generation → Privacy and security of RAG
Abstract (arXiv)
Retrieval-Augmented Generation (RAG) has recently emerged as a promising solution for enhancing the accuracy and credibility of Large Language Models (LLMs), particularly in Question & Answer tasks. This is achieved by incorporating proprietary and private data from integrated databases. However, private RAG systems face significant challenges due to the scarcity of private domain data and critical data privacy issues. These obstacles impede the deployment of private RAG systems, as developing privacy-preserving RAG systems requires a delicate balance between data security and data availability. To address these challenges, we regard federated learning (FL) as a highly promising technology for privacy-preserving RAG services. We propose a novel framework called Federated Retrieval-Augmented Generation (FedE4RAG). This framework facilitates collaborative training of client-side RAG retrieval models. The parameters of these models are aggregated and distributed on a central-server, ensuring data privacy without direct sharing of raw data. In FedE4RAG, knowledge distillation is employed for communication between the server and client models. This technique improves the generalization of local RAG retrievers during the federated learning process. Additionally, we apply homomorphic encryption within federated learning to safeguard model parameters and mitigate concerns related to data leakage. Extensive experiments conducted on the real-world dataset have validated the effectiveness of FedE4RAG. The results demonstrate that our proposed framework can markedly enhance the performance of private RAG systems while maintaining robust data privacy protection.
Key facts. Cited by 8 papers in the map (data through 14 Oct 2026). Placed in Privacy and security of RAG, one of 15 directions in Retrieval-augmented generation. Builds on 69 of its 98 references that are in the map. First posted on arXiv 27 Apr 2025.
Builds on
69 of 98 references.
Closest ancestors · 6
Same direction, newest first
- 2024C-FedRAG: A Confidential Federated Retrieval-Augmented Generation System17 Dec
- 2024Feedback-Guided Extraction of Knowledge Base from Retrieval-Augmented LLM Applications21 Nov
- 2024Is My Data in Your Retrieval Database? Membership Inference Attacks Against Retrieval Augmented Generation30 May
- 2024Follow My Instruction and Spill the Beans: Scalable Data Extraction from Retrieval-Augmented Generation Systems27 Feb
- 2024The Good and The Bad: Exploring Privacy Issues in Retrieval-Augmented Generation (RAG)23 Feb
- 2024Pandora: Jailbreak GPTs by Retrieval Augmented Generation Poisoning13 Feb
Other references · 63
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,399
- 2020A Simple Framework for Contrastive Learning of Visual Representationscited by 12,049
- 2020Retrieval-Augmented Generation for Knowledge-Intensive NLP Taskscited by 9,297
- 2018Representation Learning with Contrastive Predictive Codingcited by 7,777
- 2016Communication-Efficient Learning of Deep Networks from Decentralized Datacited by 7,669
- 2019Momentum Contrast for Unsupervised Visual Representation Learningcited by 7,513
- 2013Efficient Estimation of Word Representations in Vector Spacecited by 4,375
- 2021On the Opportunities and Risks of Foundation Modelscited by 4,033
- 2020Dense Passage Retrieval for Open-Domain Question Answeringcited by 3,824
- 2022Training Compute-Optimal Large Language Modelscited by 3,019
- 2018Deep contextualized word representationscited by 2,290
- 2020Extracting Training Data from Large Language Modelscited by 2,189
38 more
- 2021SimCSE: Simple Contrastive Learning of Sentence Embeddingscited by 2,173
- 2020REALM: Retrieval-Augmented Language Model Pre-Trainingcited by 2,141
- 2022Survey of Hallucination in Natural Language Generationcited by 2,075
- 2023Self-RAG: Learning to Retrieve, Generate, and Critique through Self-Reflectioncited by 1,839
- 2016Federated Learning: Strategies for Improving Communication Efficiencycited by 1,475
- 2021Improving language models by retrieving from trillions of tokenscited by 1,293
- 2019On the Convergence of FedAvg on Non-IID Datacited by 1,229
- 2020Leveraging Passage Retrieval with Generative Models for Open Domain Question Answeringcited by 1,210
- 2024M3-Embedding: Multi-Linguality, Multi-Functionality, Multi-Granularity Text Embeddings Through Self-Knowledge Distillationcited by 1,073
- 2020Adaptive Federated Optimizationcited by 1,046
- 2020Ensemble Distillation for Robust Model Fusion in Federated Learningcited by 682
- 2021Federated Learning on Non-IID Data Silos: An Experimental Studycited by 568
- 2023Active Retrieval Augmented Generationcited by 516
- 2023Ragas: Automated Evaluation of Retrieval Augmented Generationcited by 418
- 2023Scaling Data-Constrained Language Modelscited by 403
- 2016Semi-supervised Knowledge Transfer for Deep Learning from Private Training Datacited by 348
- 2022Deduplicating Training Data Mitigates Privacy Risks in Language Modelscited by 314
- 2023FinanceBench: A New Benchmark for Financial Question Answeringcited by 270
- 2024MultiHop-RAG: Benchmarking Retrieval-Augmented Generation for Multi-Hop Queriescited by 257
- 2025Agentic Retrieval-Augmented Generation: A Survey on Agentic RAGcited by 249
- 2018Communication-Efficient On-Device Machine Learning: Federated Distillation and Augmentation under Non-IID Private Datacited by 243
- 2023Text Embeddings Reveal (Almost) As Much As Textcited by 192
- 2021FedKD: Communication Efficient Federated Learning via Knowledge Distillationcited by 187
- 2020Generation-Augmented Retrieval for Open-domain Question Answeringcited by 186
- 2024Retrieval-Augmented Generation with Graphs (GraphRAG)cited by 172
- 2018Large scale distributed neural network training through online distillationcited by 146
- 2022Rethinking with Retrieval: Faithful Large Language Model Inferencecited by 145
- 2020Distillation-Based Semi-Supervised Federated Learning for Communication-Efficient Collaborative Training with Non-IID Private Datacited by 125
- 2019Towards Visually Explaining Variational Autoencoderscited by 113
- 2023Federated Learning for Generalization, Robustness, Fairness: A Survey and Benchmarkcited by 99
- 2023Sentence Embedding Leaks More Information than You Expect: Generative Embedding Inversion Attack to Recover the Whole Sentencecited by 81
- 2024Risk Taxonomy, Mitigation, and Assessment Benchmarks of Large Language Model Systemscited by 66
- 2022FiD-Light: Efficient and Effective Retrieval-Augmented Text Generationcited by 63
- 2023Privacy-Preserving In-Context Learning for Large Language Modelscited by 50
- 2021FedGEMS: Federated Learning of Larger Server Models via Selective Knowledge Fusioncited by 49
- 2023FedML-HE: An Efficient Homomorphic-Encryption-Based Privacy-Preserving Federated Learning Systemcited by 38
- 2023In ChatGPT We Trust? Measuring and Characterizing the Reliability of ChatGPTcited by 37
- 2022Multi-Level Branched Regularization for Federated Learningcited by 34
50 most cited of 63 All 63 (JSON)
Built on by
Citing papers per year: 2025: 2; 2026: 6.
8 papers.
- 2025Privacy Challenges and Solutions in Retrieval-Augmented Generation-Enhanced LLMs for Healthcare Chatbots: A Review of Applications, Risks, and Future Directionscited by 3
- 2025A Decentralized Retrieval Augmented Generation System with Source Reliabilities Secured on Blockchaincited by 1
- 2026A Wolf in Sheep's Clothing: Targeted Routing Hijacking in Federated RAGcited by 1
- 2026Synapse: Federated Tool Routing via Typed Compendium Artifactscited by 0
- 2026Supercharging Federated Intelligence Retrievalcited by 0
- 2026Privacy-Preserving Text Sanitization for Distributed Agents Collaboration via Disentangled Representationscited by 0
- 2026Beyond Raw Context Transfer: Representation-based Federated Retrieval-Augmented Generationcited by 0
- 2026Federated Agent Optimizationcited by 0
- 2026Federated Agent Optimization1 Oct 2026
- 2026Beyond Raw Context Transfer: Representation-based Federated Retrieval-Augmented Generation26 Aug 2026
- 2026Privacy-Preserving Text Sanitization for Distributed Agents Collaboration via Disentangled Representations13 Jun 2026
- 2026A Wolf in Sheep's Clothing: Targeted Routing Hijacking in Federated RAG27 May 2026
- 2026Supercharging Federated Intelligence Retrieval26 Mar 2026
- 2026Synapse: Federated Tool Routing via Typed Compendium Artifacts31 Jan 2026
- 2025Privacy Challenges and Solutions in Retrieval-Augmented Generation-Enhanced LLMs for Healthcare Chatbots: A Review of Applications, Risks, and Future Directions14 Nov 2025
- 2025A Decentralized Retrieval Augmented Generation System with Source Reliabilities Secured on Blockchain10 Nov 2025
Similar, not cited
Close in wording, no citation either way
- 2025Federated Retrieval-Augmented Generation: A Systematic Mapping Study
- 2026Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems
- 2024Privacy-Preserving Retrieval-Augmented Generation with Differential Privacy
- 2025Privacy-Aware RAG: Secure and Isolated Knowledge Retrieval
- 2026Towards Secure Retrieval-Augmented Generation: A Comprehensive Review of Threats, Defenses and Benchmarks
- 2025Private-RAG: Answering Multiple Queries with LLMs while Keeping Your Data Private
- 2024RemoteRAG: A Privacy-Preserving LLM Cloud RAG Service
- 2026FedMosaic: Federated Retrieval-Augmented Generation via Parametric Adapters