CareNets: Efficient Homomorphic CNN for High Resolution Images

Deep learning as a service paradigms are increasingly employed for image-based applications spanning surveillance, healthcare, biometrics, and e-commerce. Typically, trained convolutional neural networks (CNNs) are hosted on cloud infrastructure, and applied for inference on input images. There is interest in approaches to enhance data privacy and security in such settings. Fully homomorphic encryption (FHE) can address this need as it caters to computations on encrypted data, but poses intensive computational burden. Prior works have proposed approaches to alleviate this burden for 32 × 32 images, but practical applications require at least 10X higher resolution. Here, we present CareNets: Compact and Resource Efficient CNN for homomorphic inference on encrypted high-resolution images. Our approach is based on a novel compact packing scheme that packs CNN inputs, weights and activations densely into HE ciphertexts; and integrates them into the CNN computation flow. We implement CareNets using a GPU-accelerated FHE library for CNN inference on encrypted retinal images of size 96 × 96 and 256 × 256. Our results show that CareNets achieves over 32.78× speedup, 45× improvement in memory efficiency, and 5851× reduction in transferred message size while maintaining accuracy within 3% of the non-encrypted CNN baselines.

[1]  Mei Wang,et al.  Deep Face Recognition: A Survey , 2018, Neurocomputing.

[2]  Fabrice Mériaudeau,et al.  Indian Diabetic Retinopathy Image Dataset (IDRiD): A Database for Diabetic Retinopathy Screening Research , 2018, Data.

[3]  Jie Lin,et al.  The AlexNet Moment for Homomorphic Encryption: HCNN, the First Homomorphic CNN on Encrypted Data with GPUs , 2018, IACR Cryptol. ePrint Arch..

[4]  Kirit J. Modi,et al.  Cloud computing - concepts, architecture and challenges , 2012, 2012 International Conference on Computing, Electronics and Electrical Technologies (ICCEET).

[5]  László G. Nyúl,et al.  QR code localization using deep neural networks , 2014, 2014 IEEE International Workshop on Machine Learning for Signal Processing (MLSP).

[6]  Ran Gilad-Bachrach,et al.  Low Latency Privacy Preserving Inference , 2018, ICML.

[7]  Xiaoqian Jiang,et al.  Secure Outsourced Matrix Computation and Application to Neural Networks , 2018, CCS.

[8]  Li Fei-Fei,et al.  Faster CryptoNets: Leveraging Sparsity for Real-World Encrypted Inference , 2018, ArXiv.

[9]  James M. Brown,et al.  Automated Diagnosis of Plus Disease in Retinopathy of Prematurity Using Deep Convolutional Neural Networks , 2018, JAMA ophthalmology.

[10]  Alberto Botana López,et al.  Deep Learning in Biometrics: A Survey , 2019, ADCAIJ: Advances in Distributed Computing and Artificial Intelligence Journal.

[11]  Yao Lu,et al.  Oblivious Neural Network Predictions via MiniONN Transformations , 2017, IACR Cryptol. ePrint Arch..

[12]  Ian Goodfellow,et al.  Deep Learning with Differential Privacy , 2016, CCS.

[13]  Michael Naehrig,et al.  CryptoNets: applying neural networks to encrypted data with high throughput and accuracy , 2016, ICML 2016.

[14]  Shai Halevi,et al.  Algorithms in HElib , 2014, CRYPTO.

[15]  Jun Sakuma,et al.  Using Fully Homomorphic Encryption for Statistical Analysis of Categorical, Ordinal and Numerical Data , 2016, NDSS.

[16]  Anantha Chandrakasan,et al.  Gazelle: A Low Latency Framework for Secure Neural Network Inference , 2018, IACR Cryptol. ePrint Arch..

[17]  Hassan Takabi,et al.  CryptoDL: Deep Neural Networks over Encrypted Data , 2017, ArXiv.

[18]  Farinaz Koushanfar,et al.  XONN: XNOR-based Oblivious Deep Neural Network Inference , 2019, IACR Cryptol. ePrint Arch..

[19]  Ronald M. Summers,et al.  Deep Learning in Medical Imaging: Overview and Future Promise of an Exciting New Technique , 2016 .