ã°ããŒãã«ãªèŠèŽè åãã«ãã¿ã€ãå®å šæ§ãå®å šãªåŠç¿ãã©ã®ããã«é©æ°ã§ãããã«çŠç¹ãåœãŠããã©ã€ãã·ãŒä¿è·æ©æ¢°åŠç¿ã®æå ç«¯ãæ¢æ±ããŸãã
ãžã§ããªãã¯ãã©ã€ãã·ãŒä¿è·MLïŒã¿ã€ãå®å šæ§ã«ããåŠç¿ã®ä¿è·
æ©æ¢°åŠç¿ïŒMLïŒã®æ¥éãªé²æ©ã¯ãåäŸã®ãªã驿°ã®æä»£ãå°æ¥ãããæ°ãåããªãã»ã©ã®æ¥çã§é²æ©ãæšé²ããŠããŸãããããããã®é²æ©ã¯ãããŒã¿ãã©ã€ãã·ãŒãšã»ãã¥ãªãã£ã«é¢ããæžå¿µã®é«ãŸãã«ãã£ãŠãŸããŸã圱ãèããªã£ãŠããŸããMLã¢ãã«ãæŽç·ŽãããããŒã¿ããªãã³ã«ãªãã«ã€ããŠãããããåŠçããæ©å¯æ å ±ã¯ã䟵害ã誀çšã®äž»èŠãªæšçã«ãªããŸãããžã§ããªãã¯ãã©ã€ãã·ãŒä¿è·æ©æ¢°åŠç¿ïŒPPMLïŒã¯ãåºç€ãšãªãããŒã¿ã®æ©å¯æ§ãæãªãããšãªããMLã¢ãã«ã®ãã¬ãŒãã³ã°ãšå±éãå¯èœã«ããããšã«ããããã®éèŠãªèª²é¡ã«å¯ŸåŠããããšãç®çãšããŠããŸãããã®èšäºã§ã¯ãPPMLã®ã³ã¢ã³ã³ã»ãããæãäžããç¹ã«ã¿ã€ãå®å šæ§ããäžçèŠæš¡ã§ãããã®æŽç·ŽãããåŠç¿ã·ã¹ãã ã®ã»ãã¥ãªãã£ãšä¿¡é Œæ§ãé«ããããã®åŒ·åãªã¡ã«ããºã ãšããŠã©ã®ããã«åºçŸããŠãããã«çŠç¹ãåœãŠãŠããŸãã
MLã«ããããã©ã€ãã·ãŒã®éèŠæ§ã®é«ãŸã
仿¥ã®çžäºæ¥ç¶ãããäžçã§ã¯ãããŒã¿ã¯æ°ããç³æ²¹ãšåŒã°ããããšããããããŸããäŒæ¥ãç ç©¶è ãæ¿åºã¯ãæ¶è²»è è¡åãäºæž¬ããç æ°ã蚺æãããµãã©ã€ãã§ãŒã³ãæé©åãããªã©ãMLã¢ãã«ããã¬ãŒãã³ã°ããããã«èšå€§ãªããŒã¿ã»ãããæŽ»çšããŠããŸãããããããã®ããŒã¿ãžã®äŸåã¯ãåºæã®ãªã¹ã¯ããããããŸãã
- æ©å¯æ å ±ïŒããŒã¿ã»ããã«ã¯ãå人ãç¹å®ã§ããæ å ±ïŒPIIïŒãå¥åº·èšé²ã財å詳现ãããã³ç¬èªã®ããžãã¹ããŒã¿ãé »ç¹ã«å«ãŸããŠããŸãã
 - èŠå¶ç°å¢ïŒãšãŒãããã®GDPRïŒäžè¬ããŒã¿ä¿è·èŠåïŒãç±³åœã®CCPAïŒã«ãªãã©ã«ãã¢æ¶è²»è ãã©ã€ãã·ãŒæ³ïŒãããã³äžçäžã®åæ§ã®ãã¬ãŒã ã¯ãŒã¯ãªã©ã峿 ŒãªããŒã¿ä¿è·èŠå¶ã¯ãå ç¢ãªãã©ã€ãã·ãŒå¯Ÿçã矩åä»ããŠããŸãã
 - å«ççé æ ®ïŒæ³çèŠä»¶ãè¶ ããŠãå人ã®ãã©ã€ãã·ãŒãä¿è·ãã誀ã£ãåãæ±ãããŒã¿ããçããå¯èœæ§ã®ããã¢ã«ãŽãªãºã ã®ãã€ã¢ã¹ãé²ããšããå«ççèŠè«ãé«ãŸã£ãŠããŸãã
 - ãµã€ããŒã»ãã¥ãªãã£ã®è åšïŒMLã¢ãã«èªäœã¯ãããŒã¿ãã€ãºãã³ã°ãã¢ãã«å転ãã¡ã³ããŒã·ããæšè«æ»æãªã©ããã¬ãŒãã³ã°ããŒã¿ã«é¢ããæ©å¯æ å ±ãæããã«ã§ããæ»æã«å¯ŸããŠè匱ã«ãªãå¯èœæ§ããããŸãã
 
ãããã®èª²é¡ã¯ãMLéçºãžã®ã¢ãããŒãã«ããããã©ãã€ã ã·ãããã€ãŸãããŒã¿äžå¿ãããã©ã€ãã·ãŒãã€ãã¶ã€ã³ã¢ãããŒããžã®ç§»è¡ãå¿ èŠãšããŸãããžã§ããªãã¯PPMLã¯ããã©ã€ãã·ãŒéåã«å¯ŸããŠæ¬è³ªçã«ããå ç¢ãªMLã·ã¹ãã ãæ§ç¯ããããã«èšèšãããäžé£ã®æè¡ãæäŸããŸãã
ãžã§ããªãã¯ãã©ã€ãã·ãŒä¿è·MLïŒPPMLïŒã®çè§£
ãžã§ããªãã¯PPMLã¯ãMLã¢ã«ãŽãªãºã ããçã®æ©å¯æ å ±ãå ¬éããããšãªãããŒã¿ã«å¯ŸããŠæäœã§ããããã«ããå¹ åºãæè¡ãç¶²çŸ ããŠããŸãããã®ç®çã¯ãããŒã¿ã®ãã©ã€ãã·ãŒãç¶æããªãããããŒã¿ããèšç®ãå®è¡ããããæŽå¯ãå°ãåºãããããããšã§ããPPMLå ã®äž»èŠãªã¢ãããŒãã«ã¯ã以äžãå«ãŸããŸãã
1. å·®åãã©ã€ãã·ãŒïŒDPïŒ
å·®åãã©ã€ãã·ãŒã¯ãæ éã«èª¿æŽããããã€ãºãããŒã¿ãŸãã¯ã¯ãšãªçµæã«è¿œå ããããšã«ããã匷åãªãã©ã€ãã·ãŒã®ä¿èšŒãæäŸããæ°åŠçãã¬ãŒã ã¯ãŒã¯ã§ããããã¯ãåã ã®ããŒã¿ãããŒã¿ã»ããã«å«ãŸããŠãããã©ããã«é¢ä¿ãªããåæã®çµæãã»ãŒåãã§ããããšãä¿èšŒããŸããããã«ãããæ»æè ãç¹å®ã®å人ã«é¢ããæ å ±ãæšæž¬ããããšãéåžžã«å°é£ã«ãªããŸãã
ä»çµã¿ïŒ
DPã¯ãã©ã³ãã ãã€ãºãèšç®ããã»ã¹ã«æ³šå ¥ããããšã«ãã£ãŠå®çŸãããŸãããã€ãºã®éã¯ããã©ã€ãã·ãŒãã©ã¡ãŒã¿ã§ããã€ãã·ãã³ïŒÎµïŒã«ãã£ãŠæ±ºå®ãããŸããå°ããã€ãã·ãã³ã¯ããã匷åãªãã©ã€ãã·ãŒä¿èšŒã瀺ããŸããã粟床ãäœãçµæãããããå¯èœæ§ããããŸãã
ã¢ããªã±ãŒã·ã§ã³ïŒ
- éèšçµ±èšïŒæ©å¯ããŒã¿ã»ããããå¹³åãã«ãŠã³ããªã©ã®çµ±èšãèšç®ããéã®ãã©ã€ãã·ãŒã®ä¿è·ã
 - MLã¢ãã«ã®ãã¬ãŒãã³ã°ïŒDPã¯ãMLã¢ãã«ã®ãã¬ãŒãã³ã°äžã«é©çšããŠïŒããšãã°ãDP-SGD - å·®åãã©ã€ããŒã確ççåŸé éäžæ³ïŒãã¢ãã«ãåã ã®ãã¬ãŒãã³ã°ãµã³ãã«ãèšæ¶ããªãããã«ããããšãã§ããŸãã
 - ããŒã¿ã®ãªãªãŒã¹ïŒDPä¿èšŒä»ãã®ããŒã¿ã»ããã®å¿ååãããããŒãžã§ã³ã®ãªãªãŒã¹ã
 
ã°ããŒãã«ãªé¢é£æ§ïŒ
DPã¯ãæ®éçãªé©çšæ§ãæã€åºæ¬çãªæŠå¿µã§ããããšãã°ãAppleãGoogleãªã©ã®ãã¯ãããžãŒå€§æã¯ãDPã䜿çšããŠãåã ã®ãŠãŒã¶ãŒã®ãã©ã€ãã·ãŒãæãªãããšãªããããã€ã¹ãã䜿çšçµ±èšïŒããšãã°ãããŒããŒãã®ææ¡ãçµµæåã®äœ¿çšïŒãåéããŠããŸããããã«ããããŠãŒã¶ãŒã®ããŒã¿æš©ãå°éããªãããéåçãªè¡åã«åºã¥ããŠãµãŒãã¹ã®æ¹åãå¯èœã«ãªããŸãã
2. æºååæå·åïŒHEïŒ
æºååæå·åã䜿çšãããšãæåã«åŸ©å·åããããšãªããæå·åãããããŒã¿ã«å¯ŸããŠçŽæ¥èšç®ãå®è¡ã§ããŸãããããã®èšç®ã®çµæã¯ã埩å·åãããå Žåãå ã®ãã¬ãŒã³ããã¹ãããŒã¿ã«å¯ŸããŠèšç®ãå®è¡ãããå Žåãšåãã§ããããã¯ãå€ãã®å Žåããæå·åãããããŒã¿ã§ã®èšç®ããšåŒã°ããŸãã
HEã®ã¿ã€ãïŒ
- éšåæºååæå·åïŒPHEïŒïŒ1çš®é¡ã®æäœïŒããšãã°ãå ç®ãŸãã¯ä¹ç®ïŒãç¡å¶éã«ãµããŒãããŸãã
 - ããçšåºŠã®æºååæå·åïŒSHEïŒïŒå ç®ãšä¹ç®ã®äž¡æ¹ã®æäœãéãããæ°ã ããµããŒãããŸãã
 - å®å šæºååæå·åïŒFHEïŒïŒå ç®ãšä¹ç®ã®äž¡æ¹ã®æäœãç¡å¶éã«ãµããŒãããæå·åãããããŒã¿ã«å¯ŸããŠä»»æã®èšç®ãå¯èœã«ããŸãã
 
ã¢ããªã±ãŒã·ã§ã³ïŒ
- ã¯ã©ãŠãMLïŒãŠãŒã¶ãŒã¯ãã¯ã©ãŠããããã€ããŒãçã®ããŒã¿ãèŠãããšãªããMLã¢ãã«ã®ãã¬ãŒãã³ã°ãŸãã¯æšè«ã®ããã«æå·åãããããŒã¿ãã¯ã©ãŠããµãŒããŒã«ã¢ããããŒãã§ããŸãã
 - å®å šãªã¢ãŠããœãŒã·ã³ã°ïŒäŒæ¥ã¯ãããŒã¿ã®æ©å¯æ§ãç¶æããªãããæ©å¯èšç®ããµãŒãããŒãã£ãããã€ããŒã«ã¢ãŠããœãŒã·ã³ã°ã§ããŸãã
 
課é¡ïŒ
HEãç¹ã«FHEã¯èšç®éçŽåã§ãããèšç®æéãšããŒã¿ãµã€ãºãå€§å¹ ã«å¢å ãããå¯èœæ§ããããããå€ãã®ãªã¢ã«ã¿ã€ã ã¢ããªã±ãŒã·ã§ã³ã«ã¯å®çšçã§ã¯ãããŸããããã®å¹çãæ¹åããããã®ç ç©¶ãé²è¡äžã§ãã
3. å®å šãªãã«ãããŒãã£èšç®ïŒSMPCãŸãã¯MPCïŒ
SMPCã䜿çšãããšãè€æ°ã®åœäºè ããèªåã®å ¥åãäºãã«æããã«ããããšãªããèªåã®ãã©ã€ããŒãå ¥åã«å¯ŸããŠé¢æ°ãå ±åã§èšç®ã§ããŸããååœäºè ã¯ãèšç®ã®æçµçãªåºåã®ã¿ãåŠç¿ããŸãã
ä»çµã¿ïŒ
SMPCãããã³ã«ã¯éåžžãããŒã¿ãç§å¯ã®å ±æã«åå²ãããããã®å ±æãé¢ä¿è éã§åæ£ãããããã®å ±æã«å¯ŸããŠèšç®ãå®è¡ããããšãå«ã¿ãŸããããŸããŸãªæå·åæè¡ã䜿çšããŠãåäžã®åœäºè ãå ã®ããŒã¿ãåæ§ç¯ã§ããªãããã«ããŸãã
ã¢ããªã±ãŒã·ã§ã³ïŒ
- å ±åMLïŒè€æ°ã®çµç¹ããåã ã®ããŒã¿ãå ±æããããšãªããçµã¿åããããã©ã€ããŒãããŒã¿ã»ããã§å ±æMLã¢ãã«ããã¬ãŒãã³ã°ã§ããŸããããšãã°ãããã€ãã®ç é¢ãååããŠãæ£è èšé²ãããŒã«ããããšãªãã蚺æã¢ãã«ããã¬ãŒãã³ã°ã§ããŸãã
 - ãã©ã€ããŒãããŒã¿åæïŒããŸããŸãªãœãŒã¹ããã®æ©å¯ããŒã¿ã»ããã®å ±ååæãå¯èœã«ããŸãã
 
äŸïŒ
äžæ£è¡çºé²æ¢MLã¢ãã«ããã¬ãŒãã³ã°ãããéè¡ã®ã³ã³ãœãŒã·ã¢ã ãæ³åããŠã¿ãŠãã ãããåéè¡ã«ã¯ç¬èªã®ååŒããŒã¿ããããŸããSMPCã䜿çšãããšãéè¡ã¯ãã©ã®éè¡ã顧客ã®ååŒå±¥æŽãä»ã®éè¡ã«æããã«ããããšãªãããã¹ãŠã®ããŒã¿ããã¡ãªãããåŸãã¢ãã«ãå ±åã§ãã¬ãŒãã³ã°ã§ããŸãã
4. é£ååŠç¿ïŒFLïŒ
é£ååŠç¿ã¯ãããŒã«ã«ããŒã¿ãµã³ãã«ãä¿æããè€æ°ã®åæ£ãšããžããã€ã¹ãŸãã¯ãµãŒããŒå šäœã§ãããŒã¿ã亀æããããšãªãã¢ã«ãŽãªãºã ããã¬ãŒãã³ã°ãã忣MLã¢ãããŒãã§ãã代ããã«ãã¢ãã«ã®æŽæ°ïŒããšãã°ãåŸé ãŸãã¯ã¢ãã«ãã©ã¡ãŒã¿ïŒã®ã¿ãå ±æãããéäžçã«éèšãããŸãã
ä»çµã¿ïŒ
- ã°ããŒãã«ã¢ãã«ã¯ãäžå€®ãµãŒããŒã§åæåãããŸãã
 - ã°ããŒãã«ã¢ãã«ã¯ãéžæãããã¯ã©ã€ã¢ã³ãããã€ã¹ïŒããšãã°ãã¹ããŒããã©ã³ãç é¢ïŒã«éä¿¡ãããŸãã
 - åã¯ã©ã€ã¢ã³ãã¯ãç¬èªã®ããŒã¿ã§ããŒã«ã«ã«ã¢ãã«ããã¬ãŒãã³ã°ããŸãã
 - ã¯ã©ã€ã¢ã³ãã¯ãã¢ãã«ã®æŽæ°ïŒããŒã¿ã§ã¯ãªãïŒãäžå€®ãµãŒããŒã«éãè¿ããŸãã
 - äžå€®ãµãŒããŒã¯ããããã®æŽæ°ãéèšããŠãã°ããŒãã«ã¢ãã«ãæ¹åããŸãã
 
FLã®ãã©ã€ãã·ãŒã®åŒ·åïŒ
FLã¯æ¬è³ªçã«ããŒã¿ã®ç§»åãæžãããŸãããããã ãã§ã¯å®å šã«ãã©ã€ãã·ãŒãä¿è·ãããã®ã§ã¯ãããŸãããã¢ãã«ã®æŽæ°ã¯ããŸã æ å ±ãæŒæŽ©ããå¯èœæ§ããããŸãããããã£ãŠãFLã¯ããã©ã€ãã·ãŒã匷åããããã«ãå·®åãã©ã€ãã·ãŒãå®å šãªéèšïŒã¢ãã«ã®æŽæ°ãéèšããããã®SMPCã®äžçš®ïŒãªã©ã®ä»ã®PPMLæè¡ãšçµã¿åãããŠäœ¿çšââãããããšããããããŸãã
ã°ããŒãã«ãªåœ±é¿ïŒ
FLã¯ãã¢ãã€ã«MLãIoTãããã³ãã«ã¹ã±ã¢ã«é©åœããããããŠããŸããããšãã°ãGoogleã®Gboardã¯ãFLã䜿çšããŠãAndroidããã€ã¹ã§ã®æ¬¡ã®åèªäºæž¬ãæ¹åããŠããŸãããã«ã¹ã±ã¢ã§ã¯ãFLã«ãããæ©å¯æ§ã®é«ãæ£è èšé²ãéäžåããããšãªããè€æ°ã®ç é¢ã§å»ç蚺æã¢ãã«ããã¬ãŒãã³ã°ã§ãããããäžçäžã§ããè¯ãæ²»çãå¯èœã«ãªããŸãã
PPMLã»ãã¥ãªãã£ã匷åããäžã§ã®ã¿ã€ãå®å šæ§ã®åœ¹å²
äžèšã®æå·åæè¡ã¯åŒ·åãªãã©ã€ãã·ãŒä¿èšŒãæäŸããŸãããå®è£ ãè€éã§ãšã©ãŒãçºçãããããªãå¯èœæ§ããããŸããããã°ã©ãã³ã°èšèªèšèšããã®ååã«è§Šçºãããã¿ã€ãå®å šæ§ã®å°å ¥ã¯ãPPMLã·ã¹ãã ã«è£å®çãã€éèŠãªã»ãã¥ãªãã£ãšä¿¡é Œæ§ã®å±€ãæäŸããŸãã
ã¿ã€ãå®å šæ§ãšã¯ïŒ
ããã°ã©ãã³ã°ã§ã¯ãã¿ã€ãå®å šæ§ã«ãããæäœãé©åãªã¿ã€ãã®ããŒã¿ã«å¯ŸããŠå®è¡ãããããšãä¿èšŒãããŸããããšãã°ãæç€ºçãªå€æãªãã«ãæååãæŽæ°ã«è¿œå ããããšã¯ã§ããŸãããã¿ã€ãå®å šæ§ã¯ãã³ã³ãã€ã«æãŸãã¯å³å¯ãªã©ã³ã¿ã€ã ãã§ãã¯ãéããŠãæœåšçãªåãã¹ãããããã£ããããããšã«ãããã©ã³ã¿ã€ã ãšã©ãŒãšè«çãã°ãé²ãã®ã«åœ¹ç«ã¡ãŸãã
PPMLãžã®ã¿ã€ãå®å šæ§ã®é©çš
ã¿ã€ãå®å šæ§ã®æŠå¿µã¯PPMLã®é åã«æ¡åŒµããŠãæ©å¯ããŒã¿ãšãã©ã€ãã·ãŒä¿è·ã¡ã«ããºã ãå«ãæäœãæ£ããå®å šã«åŠçãããããã«ããããšãã§ããŸããããã«ã¯ãããŒã¿ã«åºã¥ããŠç¹å®ã®ãã¿ã€ãããå®çŸ©ããé©çšããããšãå«ãŸããŸãã
- æåºŠã¬ãã«ïŒããŒã¿ã¯ãçã®PIIãå¿ååãããããŒã¿ãæå·åãããããŒã¿ããŸãã¯çµ±èšçéèšã§ããïŒ
 - ãã©ã€ãã·ãŒä¿èšŒïŒãã®ããŒã¿ãŸãã¯èšç®ã«é¢é£ä»ããããŠãããã©ã€ãã·ãŒã®ã¬ãã«ïŒããšãã°ãç¹å®ã®DPäºç®ãæå·åã®çš®é¡ãSMPCãããã³ã«ïŒã¯ïŒ
 - èš±å¯ãããæäœïŒãã®ããŒã¿åã«å¯ŸããŠã©ã®æäœãèš±å¯ãããŠããŸããïŒããšãã°ãçã®PIIã¯å³æ Œãªå¶åŸ¡äžã§ã®ã¿ã¢ã¯ã»ã¹ã§ããå Žåããããæå·åãããããŒã¿ã¯HEã©ã€ãã©ãªã§åŠçã§ããŸãã
 
PPMLã«ãããã¿ã€ãå®å šæ§ã®å©ç¹ïŒ
- 
    
å®è£ ãšã©ãŒã®åæžïŒ
PPMLæè¡ã«ã¯ãå€ãã®å Žåãè€éãªæ°åŠçæŒç®ãšæå·åãããã³ã«ãå«ãŸããŸããã¿ã€ãã·ã¹ãã ã¯éçºè ãã¬ã€ãããåãã©ã€ãã·ãŒã¡ã«ããºã ã«æ£ãã颿°ãšãã©ã¡ãŒã¿ã䜿çšããŠããããšã確èªã§ããŸããããšãã°ãã¿ã€ãã·ã¹ãã ã¯ãæºååçã«æå·åãããããŒã¿çšã«èšèšããã颿°ã誀ã£ãŠå·®åãã©ã€ããŒãããŒã¿ã«é©çšããããšãé²ãããã©ã€ãã·ãŒãæãªãå¯èœæ§ã®ããè«çãšã©ãŒãåé¿ã§ããŸãã
 - 
    
ã»ãã¥ãªãã£ä¿èšŒã®åŒ·åïŒ
ããŸããŸãªã¿ã€ãã®æ©å¯ããŒã¿ã®åŠçæ¹æ³ã«é¢ããã«ãŒã«ã峿 Œã«é©çšããããšã«ãããã¿ã€ãå®å šæ§ã¯ãå¶çºçãªããŒã¿ã®æŒæŽ©ã誀çšã«å¯Ÿãã匷åãªé²åŸ¡ãæäŸããŸããããšãã°ããPIIã¿ã€ããã¯ãããã«å¯Ÿãããã¹ãŠã®æäœããæå®ããããã©ã€ãã·ãŒä¿è·APIã«ãã£ãŠä»²ä»ãããããšã匷å¶ããçŽæ¥ã¢ã¯ã»ã¹ãèš±å¯ããªãå¯èœæ§ããããŸãã
 - 
    
PPMLæè¡ã®ã³ã³ããŒã¶ããªãã£ã®åäžïŒ
å®éã®PPMLãœãªã¥ãŒã·ã§ã³ã¯ãè€æ°ã®æè¡ïŒããšãã°ãå·®åãã©ã€ãã·ãŒãšå®å šãªéèšã䜿çšããé£ååŠç¿ïŒãçµã¿åãããããšããããããŸããã¿ã€ãå®å šæ§ã¯ããããã®è€åã·ã¹ãã ãæ£ããçµ±åãããŠããããšã確èªããããã®ãã¬ãŒã ã¯ãŒã¯ãæäŸã§ããŸããããŸããŸãªããã©ã€ãã·ãŒã¿ã€ããã¯ãããŸããŸãªæ¹æ³ã§åŠçãããããŒã¿ã衚ãããšãã§ããã¿ã€ãã·ã¹ãã ã¯ãçµã¿åãããæå¹ã§ãããç®çã®å šäœçãªãã©ã€ãã·ãŒä¿èšŒãç¶æããŠããããšãæ€èšŒã§ããŸãã
 - 
    
ç£æ»å¯èœã§æ€èšŒå¯èœãªã·ã¹ãã ïŒ
é©åã«å®çŸ©ãããã¿ã€ãã·ã¹ãã ã¯ãMLã·ã¹ãã ã®ãã©ã€ãã·ãŒããããã£ãç£æ»ããã³æ€èšŒããããšã容æã«ããŸããã¿ã€ãã¯ãããŒã¿ã®ãã©ã€ãã·ãŒç¶æ ãšèšç®ãæç¢ºã«å®çŸ©ããæ£åŒãªæ³šéãšããŠæ©èœããã»ãã¥ãªãã£ç£æ»äººãã³ã³ãã©ã€ã¢ã³ã¹ãè©äŸ¡ããæœåšçãªè匱æ§ãç¹å®ããããšã容æã«ããŸãã
 - 
    
éçºè ã®çç£æ§ãšæè²ïŒ
PPMLã¡ã«ããºã ã®è€éãã®äžéšãæœè±¡åããããšã«ãããã¿ã€ãå®å šæ§ã¯ããããã®æè¡ãããåºç¯ãªç¯å²ã®éçºè ãå©çšã§ããããã«ããããšãã§ããŸããæç¢ºãªã¿ã€ãã®å®çŸ©ãšã³ã³ãã€ã«æã®ãã§ãã¯ã¯ãåŠç¿æ²ç·ã軜æžããéçºè ããã©ã€ãã·ãŒã€ã³ãã©ã¹ãã©ã¯ãã£ãå ç¢ã§ããããšãç¥ã£ãŠãMLããžãã¯èªäœã«ããã«éäžã§ããããã«ããŸãã
 
PPMLã«ãããã¿ã€ãå®å šæ§ã®äŸïŒ
ããã€ãã®å ·äœçãªã·ããªãªãèããŠã¿ãŸãããã
ã·ããªãª1ïŒå·®åãã©ã€ãã·ãŒã䜿çšããé£ååŠç¿
é£ååŠç¿ãä»ããŠãã¬ãŒãã³ã°ãããŠããMLã¢ãã«ãèããŠã¿ãŸããããåã¯ã©ã€ã¢ã³ãã«ã¯ããŒã«ã«ããŒã¿ããããŸããå·®åãã©ã€ãã·ãŒã远å ããã«ã¯ãéèšåã«åŸé ã«ãã€ãºã远å ãããŸãã
ã¿ã€ãã·ã¹ãã ã¯æ¬¡ã®ããã«å®çŸ©ã§ããŸãã
RawDataïŒæªåŠçã®æ©å¯ããŒã¿ã衚ããŸããDPGradientïŒå·®åãã©ã€ãã·ãŒã§æªä¹±ãããã¢ãã«åŸé ã衚ããé¢é£ãããã©ã€ãã·ãŒããžã§ããïŒã€ãã·ãã³ïŒãéã³ãŸããAggregatedGradientïŒå®å šãªéèšåŸã®åŸé ã衚ããŸãã
ã¿ã€ãã·ã¹ãã ã¯æ¬¡ã®ãããªã«ãŒã«ãé©çšããŸãã
RawDataã«çŽæ¥ã¢ã¯ã»ã¹ããæäœã«ã¯ãç¹å®ã®æ¿èªãã§ãã¯ãå¿ èŠã§ãã- åŸé
èšç®é¢æ°ã¯ãDPäºç®ãæå®ãããŠããå Žåã
DPGradientã¿ã€ããåºåããå¿ èŠããããŸãã - éèšé¢æ°ã¯ã
DPGradientã¿ã€ãã®ã¿ãåãå ¥ããAggregatedGradientã¿ã€ããåºåã§ããŸãã 
ããã«ãããDPãªãã§çŽæ¥éèšãããå¯èœæ§ã®ããçã®åŸé ïŒæ©å¯ã§ããå¯èœæ§ãããïŒãããã§ã«éèšãããçµæã«DPãã€ãºã誀ã£ãŠé©çšãããã·ããªãªãåé¿ãããŸãã
ã·ããªãª2ïŒæºååæå·åã䜿çšããã¢ãã«ãã¬ãŒãã³ã°ã®å®å šãªã¢ãŠããœãŒã·ã³ã°
äŒæ¥ã¯ããµãŒãããŒãã£ã®ã¯ã©ãŠããããã€ããŒã䜿çšããŠãæºååæå·åãå©çšããŠæ©å¯ããŒã¿ã§ã¢ãã«ããã¬ãŒãã³ã°ããããšèããŠããŸãã
ã¿ã€ãã·ã¹ãã ã¯æ¬¡ã®ããã«å®çŸ©ã§ããŸãã
HEEncryptedDataïŒæºååæå·åã¹ããŒã ã䜿çšããŠæå·åãããããŒã¿ã衚ããã¹ããŒã ãšæå·åãã©ã¡ãŒã¿ã«é¢ããæ å ±ãéã³ãŸããHEComputationResultïŒHEEncryptedDataã«å¯Ÿããæºååèšç®ã®çµæã衚ããŸãã
é©çšãããã«ãŒã«ïŒ
- HEçšã«èšèšããã颿°ïŒããšãã°ãæºååå ç®ãä¹ç®ïŒã®ã¿ã
HEEncryptedDataã§æäœã§ããŸãã - ä¿¡é Œã§ããç°å¢å€ã§ã®
HEEncryptedDataã®åŸ©å·åã®è©Šã¿ã¯ãã©ã°ãç«ãŠãããŸãã - ã¿ã€ãã·ã¹ãã ã¯ãã¯ã©ãŠããããã€ããŒã
HEEncryptedDataã¿ã€ãã®ããŒã¿ã®ã¿ãåãåããåŠçããå ã®ãã¬ãŒã³ããã¹ããæ±ºããŠåãåããªãããšãä¿èšŒããŸãã 
ããã«ãããã¯ã©ãŠãã«ãã£ãŠåŠçãããŠããéã®ããŒã¿ã®èª€ã£ã埩å·åããæå³ã®ãªãçµæããããããæå·åã¹ããŒã ã«é¢ããæ å ±ãæããã«ããå¯èœæ§ã®ãããæå·åãããããŒã¿ã«å¯Ÿããæšæºçã§éæºååçãªæäœã®è©Šã¿ãåé¿ãããŸãã
ã·ããªãª3ïŒSMPCã䜿çšããçµç¹éã®æ©å¯ããŒã¿ã®åæ
è€æ°ã®ç ç©¶æ©é¢ããSMPCã䜿çšããŠãæ£è ããŒã¿ãå ±åã§åæããŠç æ°ã®ãã¿ãŒã³ãç¹å®ããããšèããŠããŸãã
ã¿ã€ãã·ã¹ãã ã¯æ¬¡ã®ããã«å®çŸ©ã§ããŸãã
SecretShareïŒSMPCãããã³ã«å ã®åœäºè éã§åæ£ãããæ©å¯ããŒã¿ã®å ±æã衚ããŸããSMPCResultïŒSMPCãä»ããŠå®è¡ãããå ±åèšç®ã®åºåã衚ããŸãã
ã«ãŒã«ïŒ
- SMPCåºæã®é¢æ°ã®ã¿ã
SecretShareã¿ã€ãã§æäœã§ããŸãã - åäžã®
SecretShareãžã®çŽæ¥ã¢ã¯ã»ã¹ã¯å¶éãããŠãããã©ã®åœäºè ãåã ã®ããŒã¿ãåæ§ç¯ã§ããªãããã«ããŸãã - ã·ã¹ãã ã¯ãå ±æã«å¯ŸããŠå®è¡ãããèšç®ããç®çã®çµ±èšåæã«æ£ãã察å¿ããŠããããšãä¿èšŒããŸãã
 
ããã«ãããåœäºè ãçã®ããŒã¿å ±æã«çŽæ¥ã¢ã¯ã»ã¹ããããšããããéSMPCæäœãå ±æã«é©çšããŠå ±ååæãšåã ã®ãã©ã€ãã·ãŒãæãªãç¶æ³ãåé¿ãããŸãã
課é¡ãšä»åŸã®æ¹åæ§
ã¿ã€ãå®å šæ§ã¯å€§ããªã¡ãªããããããããŸãããPPMLãžã®çµ±åã¯èª²é¡ããªãããã§ã¯ãããŸããã
- ã¿ã€ãã·ã¹ãã ã®è€éãïŒè€éãªPPMLã·ããªãªã«å¯ŸããŠãå æ¬çã§å¹ççãªã¿ã€ãã·ã¹ãã ãèšèšããããšã¯å°é£ãªå ŽåããããŸãã衚çŸåãšæ€èšŒå¯èœæ§ã®ãã©ã³ã¹ãéèŠã§ãã
 - ããã©ãŒãã³ã¹ãªãŒããŒãããïŒã»ãã¥ãªãã£ã«åœ¹ç«ã€ã©ã³ã¿ã€ã ã¿ã€ããã§ãã¯ã¯ãããã©ãŒãã³ã¹ãªãŒããŒããããçºçãããå¯èœæ§ããããŸããæé©åæè¡ãéèŠã«ãªããŸãã
 - æšæºåïŒPPMLã®åéã¯ãŸã çºå±éäžã«ãããŸããã¿ã€ãã®å®çŸ©ãšæœè¡ã¡ã«ããºã ã«é¢ããæ¥çæšæºã確ç«ããããšã¯ãå¹ åºãæ¡çšã«ãšã£ãŠéèŠã§ãã
 - æ¢åã®ãã¬ãŒã ã¯ãŒã¯ãšã®çµ±åïŒã¿ã€ãå®å šæ§æ©èœãäžè¬çãªMLãã¬ãŒã ã¯ãŒã¯ïŒããšãã°ãTensorFlowãPyTorchïŒã«ã·ãŒã ã¬ã¹ã«çµ±åããã«ã¯ãæ éãªèšèšãšå®è£ ãå¿ èŠã§ãã
 
ä»åŸã®ç ç©¶ã¯ãPPMLã®æŠå¿µãšã¿ã€ãå®å šæ§ãMLéçºã¯ãŒã¯ãããŒã«çŽæ¥åã蟌ããã¡ã€ã³åºæèšèªïŒDSLïŒãŸãã¯ã³ã³ãã€ã©æ¡åŒµã®éçºã«çŠç¹ãåœãŠãå¯èœæ§ããããŸããã¿ã€ã泚éã«åºã¥ãããã©ã€ãã·ãŒä¿è·ã³ãŒãã®èªåçæãææãªåéã§ãã
çµè«
ãžã§ããªãã¯ãã©ã€ãã·ãŒä¿è·æ©æ¢°åŠç¿ã¯ããã¯ãããããªç ç©¶åéã§ã¯ãªãã責任ããAIéçºã®äžå¯æ¬ ãªèŠçŽ ã«ãªãã€ã€ãããŸãããŸããŸãããŒã¿éçŽçã«ãªãäžçãããã²ãŒãããã«ã€ããŠãå·®åãã©ã€ãã·ãŒãæºååæå·åãå®å šãªãã«ãããŒãã£èšç®ãé£ååŠç¿ãªã©ã®æè¡ã¯ãæ©å¯æ å ±ãä¿è·ããããã®åºæ¬çãªããŒã«ãæäŸããŸãããã ãããããã®ããŒã«ã®è€éãã«ãããå€ãã®å Žåããã©ã€ãã·ãŒä¿èšŒãæãªãå¯èœæ§ã®ããå®è£ ãšã©ãŒãçºçããŸããã¿ã€ãå®å šæ§ã¯ããããã®ãªã¹ã¯ã軜æžããããã®åŒ·åãªãããã°ã©ããŒäžå¿ã®ã¢ãããŒããæäŸããŸããããŸããŸãªãã©ã€ãã·ãŒç¹æ§ãæã€ããŒã¿ãåŠçããæ¹æ³ã«é¢ãã峿 Œãªã«ãŒã«ãå®çŸ©ããé©çšããããšã«ãããã¿ã€ãã·ã¹ãã ã¯ã»ãã¥ãªãã£ã匷åããä¿¡é Œæ§ãåäžãããPPMLãäžçäžã®éçºè ã«ãšã£ãŠããã¢ã¯ã»ã¹ããããããŸããPPMLã§ã¿ã€ãå®å šæ§ãæ¡çšããããšã¯ããã¹ãŠã®åœå¢ãšæåãè¶ããŠããã¹ãŠã®äººã«ãšã£ãŠãããä¿¡é Œã§ããå®å šãªAIã®æªæ¥ãæ§ç¯ããããã®éèŠãªã¹ãããã§ãã
çã«å®å šã§ãã©ã€ããŒããªAIãžã®éã®ãã¯é²è¡äžã§ããé«åºŠãªæå·åæè¡ãã¿ã€ãå®å šæ§ãªã©ã®å ç¢ãªãœãããŠã§ã¢ãšã³ãžãã¢ãªã³ã°ã®ååãšçµã¿åãããããšã§ããã©ã€ãã·ãŒã«å¯Ÿããåºæ¬çãªæš©å©ãä¿è·ããªãããæ©æ¢°åŠç¿ã®å¯èœæ§ãæå€§éã«åŒãåºãããšãã§ããŸãã