Privacy-Preserving Federated Learning for Secure Healthcare Data: A Sensitivity-Aware Selective Encryption Framework for Cross-Institutional Clinical Model Training
DOI:
https://doi.org/10.65021/mwsj.v2.i3.68Keywords:
CKKS, federated learning, gradient leakage, healthcare data, selective homomorphic encryptionAbstract
Federated learning (FL) lets hospitals train a shared model without pooling patient records, but exchanged updates can still leak sensitive information, and homomorphic encryption (HE) of every parameter is costly for resource-limited clinical sites. This paper proposes SASHE-FL, a sensitivity-aware selective HE framework for cross-silo healthcare FL. Sites use SCAFFOLD-style local training and encrypt, with the CKKS scheme, a jointly agreed top-p fraction of parameters ranked by a label-sensitivity score; the server aggregates ciphertexts without decrypting them. A prototype with real CKKS encryption (TenSEAL) was evaluated on the Wisconsin breast-cancer dataset, split non-IID across five simulated institutions. Accuracy matched plaintext SCAFFOLD at every encrypted fraction (96.5 ± 1.4%). Encrypting 10% of parameters cut per-site upload by 81.5% and cryptographic compute time by 86.3% versus encrypting all parameters. However, a worst-case gradient-inversion probe still recovered inputs (cosine similarity 0.999) with the top 30% encrypted, and failed only when the entire first layer was encrypted. SCAFFOLD gave no accuracy gain over FedAvg. Protection covers only encrypted coordinates, against a non-colluding semi-honest server. The results are a small proof of concept, not clinical evidence or a formal privacy guarantee.
Downloads
References
1. Abadi, M., Chu, A., Goodfellow, I., McMahan, H. B., Mironov, I., Talwar, K., & Zhang, L. (2016). Deep learning with differential privacy. In Proceedings of the ACM SIGSAC Conference on Computer and Communications Security (CCS) (pp. 308–318). https://doi.org/10.1145/2976749.2978318
2. Benaissa, A., Retiat, B., Cebere, B., & Belfedhal, A. E. (2021). TenSEAL: A library for encrypted tensor operations using homomorphic encryption (arXiv:2104.03152). arXiv. https://doi.org/10.48550/arXiv.2104.03152
3. Bonawitz, K., Ivanov, V., Kreuter, B., Marcedone, A., McMahan, H. B., Patel, S., Ramage, D., Segal, A., & Seth, K. (2017). Practical secure aggregation for privacy-preserving machine learning. In Proceedings of the ACM SIGSAC Conference on Computer and Communications Security (CCS) (pp. 1175–1191). https://doi.org/10.1145/3133956.3133982
4. Cheon, J. H., Kim, A., Kim, M., & Song, Y. (2017). Homomorphic encryption for arithmetic of approximate numbers. In Advances in Cryptology – ASIACRYPT 2017 (pp. 409–437). Springer. https://doi.org/10.1007/978-3-319-70694-8_15
5. European Parliament and Council of the European Union. (2016). Regulation (EU) 2016/679 (General Data Protection Regulation). Official Journal of the European Union, L119, 1–88.
6. Hatamizadeh, A., Yin, H., Roth, H. R., Li, W., Kautz, J., Xu, D., & Molchanov, P. (2022). GradViT: Gradient inversion of vision transformers. In Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR) (pp. 10021–10030). https://doi.org/10.1109/CVPR52688.2022.00978
7. Hsu, R.-H., & Huang, T.-Y. (2022). Private data preprocessing for privacy-preserving federated learning. In Proceedings of the IEEE 5th International Conference on Knowledge Innovation and Invention (ICKII). https://doi.org/10.1109/ICKII55100.2022.9983518
8. Hsu, T.-M. H., Qi, H., & Brown, M. (2020). Federated visual classification with real-world data distribution. In Computer Vision – ECCV 2020. Springer. https://doi.org/10.1007/978-3-030-58607-2_5
9. Hu, C., Liu, C., Wang, S., & Zhang, T. (2023). Efficient privacy-preserving data aggregation for lightweight secure model training in federated learning. In Proceedings of the 7th International Conference on Cryptography, Security and Privacy (CSP). https://doi.org/10.1109/CSP58884.2023.00026
10. Jeong, Y., & Choi, W.-S. (2025). Efficient privacy-preserving federated learning with sensitivity-based selective homomorphic encryption. In Proceedings of the 22nd International SoC Design Conference (ISOCC). https://doi.org/10.1109/ISOCC66390.2025.11329642
11. Jiang, M., Zhong, Y., Le, A., Li, X., & Dou, Q. (2023). Client-level differential privacy via adaptive intermediary in federated medical imaging. In Medical Image Computing and Computer-Assisted Intervention – MICCAI 2023 (pp. 500–510). Springer. https://doi.org/10.1007/978-3-031-43895-0_47
12. Jin, W., Yao, Y., Han, S., Gu, J., Joe-Wong, C., Ravi, S., Avestimehr, S., & He, C. (2023). FedML-HE: An efficient homomorphic-encryption-based privacy-preserving federated learning system (arXiv:2303.10837). arXiv. https://doi.org/10.48550/arXiv.2303.10837
13. Kairouz, P., McMahan, H. B., Avent, B., Bellet, A., Bennis, M., Bhagoji, A. N., Bonawitz, K., Charles, Z., Cormode, G., Cummings, R., D'Oliveira, R. G. L., Eichner, H., El Rouayheb, S., Evans, D., Gardner, J., Garrett, Z., Gascón, A., Ghazi, B., Gibbons, P. B., . . . Zhao, S. (2021). Advances and open problems in federated learning. Foundations and Trends in Machine Learning, 14(1–2), 1–210. https://doi.org/10.1561/2200000083
14. Karimireddy, S. P., Kale, S., Mohri, M., Reddi, S., Stich, S., & Suresh, A. T. (2020). SCAFFOLD: Stochastic controlled averaging for federated learning. In Proceedings of the 37th International Conference on Machine Learning (ICML) (pp. 5132–5143).
15. Korkmaz, A., Alhonainy, A., & Rao, P. (2022). An evaluation of federated learning techniques for secure and privacy-preserving machine learning on medical datasets. In Proceedings of the IEEE Applied Imagery Pattern Recognition Workshop (AIPR). https://doi.org/10.1109/AIPR57179.2022.10092212
16. Li, T., Sahu, A. K., Zaheer, M., Sanjabi, M., Talwalkar, A., & Smith, V. (2020). Federated optimization in heterogeneous networks. In Proceedings of Machine Learning and Systems (MLSys) (Vol. 2, pp. 429–450).
17. Li, Z., He, S., Chaturvedi, P., Hoang, T.-H., Ryu, M., Huerta, E. A., Kindratenko, V., Fuhrman, J., Giger, M., Chard, R., Kim, K., & Madduri, R. (2023). APPFLx: Providing privacy-preserving cross-silo federated learning as a service. In Proceedings of the IEEE 19th International Conference on e-Science. https://doi.org/10.1109/E-SCIENCE58273.2023.10254842
18. Lin, J., Chen, J., Xiong, J., Jiao, D., Zhao, W., & Xiang, Y. (2025). A lightweight privacy-preserving federated learning framework for heterogeneity-resilient skin cancer diagnosis. IEEE Journal of Biomedical and Health Informatics. https://doi.org/10.1109/JBHI.2025.3578125
19. McMahan, B., Moore, E., Ramage, D., Hampson, S., & y Arcas, B. A. (2017). Communication-efficient learning of deep networks from decentralized data. In Proceedings of the 20th International Conference on Artificial Intelligence and Statistics (AISTATS) (pp. 1273–1282).
20. Mouchet, C., Troncoso-Pastoriza, J., Bossuat, J.-P., & Hubaux, J.-P. (2021). Multiparty homomorphic encryption from ring-learning-with-errors. Proceedings on Privacy Enhancing Technologies, 2021(4), 291–311. https://doi.org/10.2478/popets-2021-0071
21. Novak, R., Bahri, Y., Abolafia, D. A., Pennington, J., & Sohl-Dickstein, J. (2018). Sensitivity and generalization in neural networks: An empirical study. In Proceedings of the 6th International Conference on Learning Representations (ICLR).
22. Pawar, A., Jain, S., Dhait, A., Nagbhidkar, A., & Narlawar, A. (2024). Federated learning for privacy preserving in healthcare data analysis. In Proceedings of the International Conference on Artificial Intelligence and Quantum Computation-Based Sensor Application (ICAIQSA). https://doi.org/10.1109/ICAIQSA64000.2024.10882173
23. Pedregosa, F., Varoquaux, G., Gramfort, A., Michel, V., Thirion, B., Grisel, O., Blondel, M., Prettenhofer, P., Weiss, R., Dubourg, V., Vanderplas, J., Passos, A., Cournapeau, D., Brucher, M., Perrot, M., & Duchesnay, É. (2011). Scikit-learn: Machine learning in Python. Journal of Machine Learning Research, 12, 2825–2830.
24. Rieke, N., Hancox, J., Li, W., Milletari, F., Roth, H., Albarqouni, S., Bakas, S., Galtier, M. N., Landman, B., Maier-Hein, K., Ourselin, S., Sheller, M., Summers, R. M., Trask, A., Xu, D., Baust, M., & Cardoso, M. J. (2020). The future of digital health with federated learning. npj Digital Medicine, 3, Article 119. https://doi.org/10.1038/s41746-020-00323-1
25. Shokri, R., Stronati, M., Song, C., & Shmatikov, V. (2017). Membership inference attacks against machine learning models. In Proceedings of the IEEE Symposium on Security and Privacy (SP) (pp. 3–18). https://doi.org/10.1109/SP.2017.41
26. Shu, Z., Zhao, H., Xu, B., Xun, W., & Xu, B. (2023). Privacy-preserving federated learning framework via blockchain and committee mechanism. In Proceedings of the IEEE 23rd International Conference on Communication Technology (ICCT). https://doi.org/10.1109/ICCT59356.2023.10419785
27. Street, W. N., Wolberg, W. H., & Mangasarian, O. L. (1993). Nuclear feature extraction for breast tumor diagnosis. In Proceedings of SPIE 1905, Biomedical Image Processing and Biomedical Visualization (pp. 861–870). https://doi.org/10.1117/12.148698
28. Truhn, D., Arasteh, S. T., Saldanha, O. L., Mueller-Franzes, G., Khader, F., Quirke, P., West, N. P., Gray, R., Hutchins, G. G. A., James, J. A., Loughrey, M. B., Salto-Tellez, M., Brenner, H., Brobeil, A., Yuan, T., Chang-Claude, J., Hoffmeister, M., Foersch, S., Han, T., . . . Kather, J. N. (2024). Encrypted federated learning for secure decentralized collaboration in cancer image analysis. Medical Image Analysis, 92, Article 103059. https://doi.org/10.1016/j.media.2023.103059
29. U.S. Department of Health and Human Services. (2002). Standards for privacy of individually identifiable health information (45 C.F.R. Parts 160 and 164, as amended).
30. Wei, W., Liu, L., Loper, M., Chow, K.-H., Gursoy, M. E., Truex, S., & Wu, Y. (2020). A framework for evaluating client privacy leakages in federated learning. In Computer Security – ESORICS 2020 (Vol. 12308, pp. 545–566). Springer. https://doi.org/10.1007/978-3-030-58951-6_27
31. Zhang, C., Li, S., Xia, J., Wang, W., Yan, F., & Liu, Y. (2020). BatchCrypt: Efficient homomorphic encryption for cross-silo federated learning. In Proceedings of the USENIX Annual Technical Conference (ATC) (pp. 493–506).
32. Zhu, L., Liu, Z., & Han, S. (2019). Deep leakage from gradients. In Advances in Neural Information Processing Systems (NeurIPS) (Vol. 32).
Downloads
Published
Issue
Section
License
Copyright (c) 2026 Dhwani Jain, Bharat Thathera (Author)
This work is licensed under a Creative Commons Attribution 4.0 International License.
Authors retain copyright of their work and grant the Milky Way Scientific Journal (MWSJ) the right of first publication. All published articles are licensed under a Creative Commons Attribution 4.0 International License (CC BY 4.0), which permits unrestricted use, distribution, and reproduction in any medium, provided the original author and source are properly cited.
