arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2604.00546cs.CR
收藏

轻量级、实用的支持GPU的加密人脸识别

Lightweight, Practical Encrypted Face Recognition with GPU Support

LG Electronics(LG电子);Universidade de São Paulo(圣保罗大学);Next-Generation Computing Research Lab, CTO, LG Electronics(LG电子CTO下一代计算研究实验室)

Gabrielle De Micheli, Syed Mahbub Hafiz, Geovandro Pereira, Eduardo L. Cominetti, Thales B. Paiva, Jina Choi, Marcos A. Simplicio, Bahattin Yildiz

AI总结:

针对加密人脸识别中计算和内存开销高的问题,提出BSGS-Diagonal算法和GPU优化内核,实现快速、低内存的相似度计算,显著减少旋转密钥数量并提升运行时性能。

摘要:

人脸识别模型在客户端-服务器设置中运行,客户端提取紧凑的人脸嵌入,服务器在模板数据库上执行相似性搜索。由于面部数据高度敏感,这引发了隐私问题。为了提供加密隐私保证,可以使用全同态加密来执行端到端的加密相似性搜索。然而,现有的基于FHE的协议计算成本高,且内存开销大。在先前工作HyDia(PoPETS 2025)的基础上,我们引入了算法和系统层面的改进,针对资源受限客户端的实际部署。首先,我们提出了BSGS-Diagonal,一种快速且内存高效的相似度计算算法。BSGS-Diagonal大幅缩减了旋转密钥集,降低了客户端和服务器的内存需求,并改善了实际服务器运行时间。这使得旋转密钥数量减少了91%,客户端内存使用减少约14 GB,对于大小达100万的数据库,整体CPU峰值RAM从原始HyDia的超过33 GB降至不到11 GB。此外,在成员验证场景下运行时间提升了1.57倍,在识别场景下提升了1.43倍。其次,我们引入了完全GPU优化的相似度矩阵计算内核。该实现基于FIDESlib,一个基于OpenFHE的CKKS级GPU库。集成内核融合操作,而不是单独卸载单个CKKS原语,避免了重复的CPU-GPU密文移动和昂贵的FIDESlib/OpenFHE数据结构转换。因此,我们的HyDia和BSGS-Diagonal的GPU实现分别实现了高达9倍和21倍的加速,使得对于最多32K条目的数据库能够实现亚秒级加密人脸识别,同时进一步减少了主机内存使用。

英文摘要:

Face recognition typically operates in a client-server setting, where the client extracts a compact face embedding and the server performs similarity search over a template database. Since facial data is highly sensitive, this raises significant privacy concerns. Fully homomorphic encryption (FHE) addresses these concerns by enabling end-to-end encrypted similarity search. However, existing FHE-based protocols are computationally costly and, especially, impose high memory overhead due to large rotation-key sets and bandwidth-bound homomorphic operations. Building on prior work, HyDia (PoPETS 2025), we introduce algorithmic and system-level improvements targeting real-world deployment with resource-constrained (edge) clients. First, we propose BSGS-Diagonal, a fast and memory-efficient similarity computation algorithm that applies a Baby-Step/Giant-Step strategy with precomputed rotations reused across consecutive matrix--vector products. This yields a 91% reduction in rotation keys (~14GB less client memory) and cuts peak server-side CPU RAM usage from over 33GB to 11GB for databases up to 1M entries, with runtime improvements of up to 1.57x for membership verification and 1.43x for identification. Second, we introduce GPU-optimized similarity computation kernels, including an efficient homomorphic Chebyshev evaluator built upon FIDESlib (ISPASS 2025), a CKKS-level GPU library based on OpenFHE. Rather than offloading individual CKKS primitives, our integrated kernels fuse operations to avoid repeated CPU--GPU ciphertext movement and costly FIDESlib/OpenFHE data-structure conversions. Our HyDia and BSGS GPU results achieve up to 9x and 21x speedups on single GPU (and up to 287x and 211x using multi-GPUs), respectively, enabling sub-second encrypted face recognition for databases up to 2^16 entries (or 2^19 entries in a multi-GPU setting), while further reducing host memory usage.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑