Ring Allreduce中的梯度参数完整性保护方案

Gradient parameter data integrity protection scheme in the Ring Allreduce architecture

为了解决Ring Allreduce架构中没有保护梯度参数完整性的问题,提出了一种面向Ring Allreduce架构的梯度参数完整性保护方案(RAA-DIP).使用基于身份的组密钥协商算法和Boneh-Lynn-Shacham(BLS)签名方案保障Ring Allreduce中梯度参数的完整性.结合身份认证和密钥协商算法,实现安全高效的动态工作节点管理.基于DBDH问题实现安全的组密钥协商,使密钥生成中心(KGC)或网络攻击者无法计算工作节点的共享密钥,解决密钥托管问题,保障传输参数的完整性.对RAA-DIP方案进行形式化证明,并将仿真结果与相关方案进行比较.结果表明:RAA-DIP方案可以保障Ring Allreduce中梯度参数传输过程的完整性,实现工作节点动态管理,解决密钥托管问题;与其他方案相比,RAA-DIP方案可以同时满足安全和性能需求.

As there is no research on protecting gradient parameter data integrity in the Ring Allreduce architecture,a Ring Allreduce architecture oriented gradient parameter data integrity protection scheme(RAA-DIP)is proposed.The identity-based group key agreement algorithm and the Boneh-Lynn-Shacham signature are used to protect the integrity of gradient parameter data in Ring Allreduce(RAA).Combined with identity authentication and the key negotiation algorithm,secure and efficient dynamic management of working nodes is realized.On the basis of the decisional bilinear Diffie-Hellman problem,secure group key negotiation is implemented so that the key generation center or network attackers cannot calculate the shared secret of worker nodes,which solves the key escrow problem and ensures the integrity of transmission gradient data.Finally,the RAA-DIP scheme is formally proved,and its simulation performance is compared with those of related schemes.The results show that the RAA-DIP scheme can guarantee the integrity of the gradient parameter data transmission process in Ring Allreduce,realize the dynamic management of working nodes,and solve the problem of key escrow.Compared with related schemes,it can meet security and performance requirements.