Distributed Semi-Private Image Classification Based on Information-Bottleneck Principle

Shideh Rezaeifar, Maurits Diephuis, Behrooz Razeghi, Denis Ullmann, Olga Taran, Slava Voloshynovskiy

Abstract: In this paper, we propose a framework for semi-privacy-preserving image classification. It allows each user to train a model on her/his own particular data class, after which the output features are shared centrally. The model parameters are never shared. Individual users each use an auto-encoder to empirically ascertain their private data distribution. The resulting features are sufficiently discriminative between the private datasets. A central server aggregates all labeled output features together with a subset of the private data into a final classifier over all classes from all users. The latter forms a trade-off between privacy and classification performance. We demonstrate the viability of this scheme empirically and showcase the privacy performance compromise.