Keyed Nonlinear Transform: Lightweight Privacy-Enhancing Feature Sharing for Medical Image Analysis
Not on the map. Why?
Abstract (arXiv)
Feature sharing via split inference offers a lightweight alternative to federated learning for resource-constrained hospitals, but transmitted features still leak patient identity information and lack practical mechanisms for controlled feature sharing. We propose Keyed Nonlinear Transform (KNT), a drop-in feature transformation that applies key-conditioned obfuscation to intermediate representations. KNT reduces re-identification AUC from 0.635 to 0.586, corresponding to a 36% reduction in above-chance identity signal, while introducing only 0.15 ms CPU overhead, without backbone retraining, and preserving classification performance within 1.0 pp. Our analysis shows that KNT's nonlinear transform prevents closed-form inversion and shifts recovery to iterative gradient-based optimization under full key compromise, substantially increasing inversion difficulty. The same transform generalizes to dense prediction tasks, incurring only a 4.4 pp Dice reduction on skin-lesion segmentation without retraining. These results position KNT as a practical and efficient privacy layer for split inference deployments.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 19 of its 29 references that are in the map. First posted on arXiv 13 May 2026.
Builds on
19 of 29 references.
References · 19
- 2016Deep Learning with Differential Privacycited by 2,728
- 2017ChestX-ray8: Hospital-scale Chest X-ray Database and Benchmarks on Weakly-Supervised Classification and Localization of Common Thorax Diseasescited by 972
- 2021MedMNIST v2 -- A large-scale lightweight benchmark for 2D and 3D biomedical image classificationcited by 690
- 2019Skin Lesion Analysis Toward Melanoma Detection 2018: A Challenge Hosted by the International Skin Imaging Collaboration (ISIC)cited by 669
- 2018Exploiting Unintended Feature Leakage in Collaborative Learningcited by 520
- 2018Split learning for health: Distributed deep learning without sharing raw patient datacited by 395
- 2020InstaHide: Instance-hiding Schemes for Private Distributed Learningcited by 90
- 2020NoPeek: Information leakage reduction to share activations in distributed deep learningcited by 66
- 2021UnSplit: Data-Oblivious Model Inversion, Model Stealing, and Label Inference Attacks Against Split Learningcited by 52
- 2021Deep Learning-based Patient Re-identification Is able to Exploit the Biometric Nature of Medical Chest X-ray Datacited by 38
- 2020DISCO: Dynamic and Invariant Sensitive Channel Obfuscation for deep neural networkscited by 23
- 2023Scale-MIA: A Scalable Model Inversion Attack against Secure Federated Learning via Latent Space Reconstructioncited by 21
7 more
- 2024A Stealthy Wrongdoer: Feature-Oriented Reconstruction Attack against Split Learningcited by 17
- 2022Deep Learning-based Anonymization of Chest Radiographs: A Utility-preserving Measure for Patient Privacycited by 5
- 2024Rank Matters: Understanding and Defending Model Inversion Attacks via Low-Rank Feature Filteringcited by 4
- 2024Speech privacy-preserving methods using secret key for convolutional neural network models and their robustness evaluationcited by 2
- 2025Towards Privacy-Preserving Split Learning: Destabilizing Adversarial Inference and Reconstruction Attacks in the Cloudcited by 2
- 2025Keyed Chaotic Dynamics for Privacy-Preserving Neural Inferencecited by 1
- 2026Privacy-Preserving Collaborative Medical Image Segmentation Using Latent Transform Networkscited by 1
Built on by
Not cited yet.