Federated minimax problems, such as distributionally robust optimization and adversarial training, include an inner maximization variable built from each client's local data. These variables differ in meaning and dimension from one client to the next, so averaging them across clients, as standard federated minimax methods do, is ill-posed. We therefore study a federated minimax problem where the minimization variable x is shared and aggregated, while each client retains the maximization variable yi (personalized). Because these applications constrain yi to a compact convex set, we analyze projected ascent directly. We show that, in the nonconvex-concave regime, this projected personalized scheme attains the standard sublinear rate. In the nonconvex-PL regime, however, it hits a stepsize-invariant noise floor due to stochastic yi updates. To mitigate this, we propose VR-SGDA, incorporating a variance-reduced ascent step where each client maintains a private variable snapshot. By evaluating current and snapshot gradients on the same sample, the constant variance is replaced by a vanishing drift under a two-timescale regime. VR-SGDA eliminates the noise floor, attaining sublinear leading rates while preserving personalization and projection. Experiments on subpopulation-robustness and NLP adversarial training confirm both the worst-group robustness benefits and the two-timescale tracking mechanism.
Figures & tables
Method
x
y
Application motivated
Per-client y
Inner coupling
Projected ascent on y
Local SGDA [ 7 ]
shared
shared
×
×
general
×
DRFA [ 6 ]
shared
shared
partial
×
client-weight
×
Minimax Convergence Analysis [ 28 ]
shared
shared
×
×
general
×
FLRA [ 25 ]
shared
personalized
✓
✓
affine input shift
×
Partial model [ 23 ]
partial
—
n/a
n/a
n/a
n/a
Ours
shared
personalized
✓
✓
general
✓
Table 1: Comparison of related federated robust optimization frameworks. Our method is the only one that maintains personalized maximization variables yi updated by projected ascent on constrained set, under a general adversary coupling.
Table 2: Comprehensive Subpopulation Group Composition of the Colored MNIST Dataset
Framework
Worst-Client (%)
Mean (%)
ERM (Baseline)
34.09 (0.00)
55.56 (1.02)
Shared Model (SGDA)
34.09 (1.61)
55.60 (0.89)
Personalized Model (Ours)
38.18 (1.90)
54.50 (0.33)
Table 3: Federated-Adversarial performance evaluated on clean samples across Banking-77 dataset.
Framework
Worst-Group Accuracy (%)
Average Accuracy (%)
ERM (Baseline)
0.19 (0.20)
53.00 (4.57)
Shared Model(SGDA)
52.23 (2.19)
57.23 (0.87)
Personalized Model (Ours)
72.37 (0.88)
75.63 (1.25)
Table 4: Generalization and subpopulation robustness on Federated Colored MNIST (mean ± std over three seeds). Baseline ERM memorizes the spurious color correlation, collapsing on minority groups (0.19%). The Shared Model (Global DRO) stays near chance ( ∼ 52%). Our Fully Personalized Min-Max framework leverages decoupled local Stackelberg adversaries to unlearn color biases and extract invariant shape features, achieving a superior 72.37% worst-group accuracy.
Figure 1: Dual-tracking analysis showing the convergence of Φ(xt) .
Figure 2: ∥∇Φ(xt)∥2 for projected Local SGDA vs. Personalized VR-SGDA (mean of 5 seeds, band ±1 s.d.). SGDA plateaus at the noise floor; VR-SGDA removes it.
Beijing Institute of Technology, Beijing, China · Xi’an Jiaotong University, Xi’an, China · The Chinese University of Hong Kong (Shenzhen), Shenzhen, China