Logistic regression over encrypted data from fully homomorphic encryption

• Main Authors: Hao Chen (Author), Ran Gilad-Bachrach (Author), Kyoohyung Han (Author), Zhicong Huang (Author), Amir Jalali (Author), Kim Laine (Author), Kristin Lauter (Author)
• Format: Book
• Published: BMC, 2018-10-01T00:00:00Z.
• Subjects: article
• Online Access: Connect to this object online.
• Notes: 10.1186/s12920-018-0397-z; 1755-8794
• Keywords: Cryptography; Homomorphic encryption; Logistic regression; Internal medicine; RC31-1245; Genetics; QH426-470
• Source: BMC Medical Genomics, Vol 11, Iss S4, Pp 3-12 (2018)

Abstract Background One of the tasks in the 2017 iDASH secure genome analysis competition was to enable training of logistic regression models over encrypted genomic data. More precisely, given a list of approximately 1500 patient records, each with 18 binary features containing information on specific mutations, the idea was for the data holder to encrypt the records using homomorphic encryption, and send them to an untrusted cloud for storage. The cloud could then homomorphically apply a training algorithm on the encrypted data to obtain an encrypted logistic regression model, which can be sent to the data holder for decryption. In this way, the data holder could successfully outsource the training process without revealing either her sensitive data, or the trained model, to the cloud. Methods Our solution to this problem has several novelties: we use a multi-bit plaintext space in fully homomorphic encryption together with fixed point number encoding; we combine bootstrapping in fully homomorphic encryption with a scaling operation in fixed point arithmetic; we use a minimax polynomial approximation to the sigmoid function and the 1-bit gradient descent method to reduce the plaintext growth in the training process. Results Our algorithm for training over encrypted data takes 0.4-3.2 hours per iteration of gradient descent. Conclusions We demonstrate the feasibility but high computational cost of training over encrypted data. On the other hand, our method can guarantee the highest level of data privacy in critical applications.