SecureDrive-FL: Joint Differential Privacy and Gradient-Aware Selective Homomorphic Encryption for Federated Driver Monitoring
Organizations: Institute of Industrial Automation and Software Engineering, University of Stuttgart, Stuttgart, Germany · EngD Automotive Systems Design, Eindhoven University of Technology (TU/e), Eindhoven, The Netherlands
Abstract
Federated Learning (FL) enables privacy-aware distributed training, yet gradient updates remain exploitable: Man-in-the-Middle (MitM) interception exposes updates in transit, while model poisoning corrupts global convergence. We first introduce GASHE (Gradient-Aware Selective Homomorphic Encryption), a novel selective encryption strategy that dynamically identifies and encrypts only the gradient components exceeding a DP-calibrated sensitivity threshold, rather than encrypting all parameters uniformly as in static layer-based or full-parameter CKKS schemes. Building on GASHE, we introduce SecureDrive-FL, a federated driver monitoring framework that couples DP-SGD with GASHE to create the first closed-loop DP+HE privacy pipeline: DP-SGD calibration parameters directly derive the GASHE encryption mask, unifying training-time privacy and communication-time confidentiality. Evaluated on a ten-class distracted driver classification task under non-IID federated splits, SecureDrive-FL matches DP-SGD alone's poisoning resistance (73.6% vs. 74.0% accuracy, 3.9% Attack Success Rate for both) while additionally withstanding MitM interception, where DP-SGD alone collapses to near-random accuracy (78.2% vs. 10.4%), all under only approx. 8--10% additional runtime overhead relative to DP-SGD alone---under DP-SGD noise injection with per-round privacy parameter epsilon_0=4.
Figures & tables
| Configuration | DP | Accuracy (%) | Poisoning Metrics | ||||
|---|---|---|---|---|---|---|---|
| Clean | MitM | Poison | ASR (%) | Macro-F1 (%) | Macro-Prec. (%) | ||
| (1) Standard FL (FedAvg) | |||||||
| (2) FL + DP-SGD ( ) | ✓ | ||||||
| (3) FL + GASHE-only | |||||||
| (4) FL + Full-CKKS | |||||||
| (5) SecureDrive-FL (DP+GASHE, ) | ✓ | ||||||
| Configuration | Time (s) | Overhead | Peak RSS (MB) |
|---|---|---|---|
| FedAvg (clean) | |||
| FedAvg (MitM) | |||
| FedAvg (Poison) | |||
| GASHE-only (clean) | |||
| GASHE-only (MitM) | |||
| GASHE-only (Poison) |