Privacy-Preserving Q-Learning with Functional Noise in Continuous Spaces
We consider differentially private algorithms for reinforcement learning in continuous spaces, such that neighboring reward functions are indistinguishable. This protects the reward information from being exploited by methods such as inverse reinforcement learning. Existing studies that guarantee differential privacy are not extendable to infinite state spaces, as the noise level to ensure privacy will scale accordingly to infinity. Our aim is to protect the value function approximator, without regard to the number of states queried to the function. It is achieved by adding functional noise to the value function iteratively in the training. We show rigorous privacy guarantees by a series of analyses on the kernel of the noise space, the probabilistic bound of such noise samples, and the composition over the iterations. We gain insight into the utility analysis by proving the algorithm's approximate optimality when the state space is discrete. Experiments corroborate our theoretical findings and show improvement over existing approaches.
Code (1)
Tasks
Privacy PreservingQ-Learningreinforcement-learningReinforcement LearningReinforcement Learning (RL)Similar Papers 제목 키워드 기반
Privacy-preserving Q-Learning with Functional Noise in Continuous State Spaces
We consider differentially private algorithms for reinforcement learning in continuous spaces, such that neighboring reward functions are indistinguishable. This protects the reward information from being exploited by me…
Privacy PreservingQ-Learningreinforcement-learningReinforcement Learning+1Privacy Risk for anisotropic Langevin dynamics using relative entropy bounds
The privacy preserving properties of Langevin dynamics with additive isotropic noise have been extensively studied. However, the isotropic noise assumption is very restrictive: (a) when adding noise to existing learning …
Inference AttackMembership Inference AttackPrivacy PreservingAchieving Differential Privacy in Vertically Partitioned Multiparty Learning
Preserving differential privacy has been well studied under centralized setting. However, it's very challenging to preserve differential privacy under multiparty setting, especially for the vertically partitioned case. I…
Privacy PreservingBenefits and Pitfalls of the Exponential Mechanism with Applications to Hilbert Spaces and Functional PCA
The exponential mechanism is a fundamental tool of Differential Privacy (DP) due to its strong privacy guarantees and flexibility. We study its extension to settings with summaries based on infinite dimensional outputs s…
Differentially Private and Fair Classification via Calibrated Functional Mechanism
Machine learning is increasingly becoming a powerful tool to make decisions in a wide variety of applications, such as medical diagnosis and autonomous driving. Privacy concerns related to the training data and unfair be…
Autonomous DrivingBIG-bench Machine LearningClassificationFairness+2