Privacy-protected Retrieval-Augmented Generation for Knowledge Graph Question Answering
On the map: Retrieval-augmented generation → Privacy and security of RAG
Abstract (arXiv)
LLMs often suffer from hallucinations and outdated or incomplete knowledge. RAG is proposed to address these issues by integrating external knowledge like that in KGs into LLMs. However, leveraging private KGs in RAG systems poses significant privacy risks due to the black-box nature of LLMs and potential insecure data transmission, especially when using third-party LLM APIs lacking transparency and control. In this paper, we investigate the privacy-protected RAG scenario for the first time, where entities in KGs are anonymous for LLMs, thus preventing them from accessing entity semantics. Due to the loss of semantics of entities, previous RAG systems cannot retrieve question-relevant knowledge from KGs by matching questions with the meaningless identifiers of anonymous entities. To realize an effective RAG system in this scenario, two key challenges must be addressed: (1) How can anonymous entities be converted into retrievable information. (2) How to retrieve question-relevant anonymous entities. Hence, we propose a novel ARoG framework including relation-centric abstraction and structure-oriented abstraction strategies. For challenge (1), the first strategy abstracts entities into high-level concepts by dynamically capturing the semantics of their adjacent relations. It supplements meaningful semantics which can further support the retrieval process. For challenge (2), the second strategy transforms unstructured natural language questions into structured abstract concept paths. These paths can be more effectively aligned with the abstracted concepts in KGs, thereby improving retrieval performance. To guide LLMs to effectively retrieve knowledge from KGs, the two strategies strictly protect privacy from being exposed to LLMs. Experiments on three datasets demonstrate that ARoG achieves strong performance and privacy-robustness.
Key facts. Cited by 2 papers in the map (data through 14 Oct 2026). Placed in Privacy and security of RAG, one of 15 directions in Retrieval-augmented generation. Builds on 11 of its 23 references that are in the map. First posted on arXiv 12 Aug 2025.
Builds on
11 of 23 references.
References · 11
- 2022Self-Consistency Improves Chain of Thought Reasoning in Language Modelscited by 5,708
- 2023REPLUG: Retrieval-Augmented Black-Box Language Modelscited by 792
- 2020Making Monolingual Sentence Embeddings Multilingual using Knowledge Distillationcited by 593
- 2018The Web as a Knowledge-base for Answering Complex Questionscited by 410
- 2023StructGPT: A General Framework for Large Language Model to Reason over Structured Datacited by 343
- 2023Think-on-Graph: Deep and Responsible Reasoning of Large Language Model on Knowledge Graphcited by 238
- 2020Beyond I.I.D.: Three Levels of Generalization for Question Answering on Knowledge Basescited by 171
- 2022UniKGQA: Unified Retrieval and Reasoning for Solving Multi-hop Question Answering Over Knowledge Graphcited by 103
- 2023Few-shot In-context Learning for Knowledge Base Question Answeringcited by 74
- 2023T-SciQ: Teaching Multimodal Chain-of-Thought Reasoning via Mixed Large Language Model Signals for Science Question Answeringcited by 60
- 2024TrustUQA: A Trustful Framework for Unified Structured Data Question Answeringcited by 12
Built on by
Citing papers per year: 2025: 1; 2026: 1.
2 papers.
Similar, not cited
Close in wording, no citation either way
- 2024Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases
- 2025Exposing Privacy Risks in Graph Retrieval-Augmented Generation
- 2024Privacy-Preserving Retrieval-Augmented Generation with Differential Privacy
- 2025Private-RAG: Answering Multiple Queries with LLMs while Keeping Your Data Private
- 2025Privacy-Aware RAG: Secure and Isolated Knowledge Retrieval
- 2026Not All Entities are Created Equal: A Dynamic Anonymization Framework for Privacy-Preserving RAG
- 2026SoK: Privacy Risks and Mitigations in Retrieval-Augmented Generation Systems
- 2024T-RAG: Lessons from the LLM Trenches