PrivEraserVerify: Efficient, Private, and Verifiable Federated Unlearning
On the map: LLM safety and security → Federated unlearning and poisoning
Abstract (arXiv)
Federated learning (FL) enables collaborative model training without sharing raw data, offering a promising path toward privacy preserving artificial intelligence. However, FL models may still memorize sensitive information from participants, conflicting with the right to be forgotten (RTBF). To meet these requirements, federated unlearning has emerged as a mechanism to remove the contribution of departing clients. Existing solutions only partially address this challenge: FedEraser improves efficiency but lacks privacy protection, FedRecovery ensures differential privacy (DP) but degrades accuracy, and VeriFi enables verifiability but introduces overhead without efficiency or privacy guarantees. We present PrivEraserVerify (PEV), a unified framework that integrates efficiency, privacy, and verifiability into federated unlearning. PEV employs (i) adaptive checkpointing to retain critical historical updates for fast reconstruction, (ii) layer adaptive differentially private calibration to selectively remove client influence while minimizing accuracy loss, and (iii) fingerprint based verification, enabling participants to confirm unlearning in a decentralized and noninvasive manner. Experiments on image, handwritten character, and medical datasets show that PEV achieves up to 2 to 3 times faster unlearning than retraining, provides formal indistinguishability guarantees with reduced performance degradation, and supports scalable verification. To the best of our knowledge, PEV is the first framework to simultaneously deliver efficiency, privacy, and verifiability for federated unlearning, moving FL closer to practical and regulation compliant deployment.
Key facts. Cited by 1 paper in the map (data through 14 Oct 2026). Placed in Federated unlearning and poisoning, one of 12 directions in LLM safety and security. Builds on 10 of its 21 references that are in the map. First posted on arXiv 14 Apr 2026.
Builds on
10 of 21 references.
Closest ancestors · 2
Same direction, newest first
- 2025EFU: Enforcing Federated Unlearning via Functional Encryption11 Aug
- 2022VeriFi: Towards Verifiable Federated Unlearning25 May
Other references · 8
- 2016Communication-Efficient Learning of Deep Networks from Decentralized Datacited by 7,669
- 2019Machine Unlearningcited by 1,061
- 2017ChestX-ray8: Hospital-scale Chest X-ray Database and Benchmarks on Weakly-Supervised Classification and Localization of Common Thorax Diseasescited by 972
- 2018LEAF: A Benchmark for Federated Settingscited by 792
- 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 618
- 2019Making AI Forget You: Data Deletion in Machine Learningcited by 465
- 2021Remember What You Want to Forget: Algorithms for Machine Unlearningcited by 371
- 2021Deep Model Intellectual Property Protection via Deep Watermarkingcited by 54
Built on by
Citing papers per year: 2026: 1.
1 paper.
Similar, not cited
Close in wording, no citation either way
- 2025Federated Unlearning Made Practical: Seamless Integration via Negated Pseudo-Gradients
- 2023Exploring Federated Unlearning: Review, Comparison, and Insights
- 2024Efficient Federated Unlearning with Adaptive Differential Privacy Preservation
- 2025FedRand: Enhancing Privacy in Federated Learning with Randomized LoRA Subparameter Updates
- 2025Tackling Federated Unlearning as a Parameter Estimation Problem
- 2025Unlearning through Knowledge Overwriting: Reversible Federated Unlearning via Selective Sparse Adapter
- 2025Dual-Phase Federated Deep Unlearning via Weight-Aware Rollback and Reconstruction
- 2024Streamlined Federated Unlearning: Unite as One to Be Highly Efficient