Variational quantum algorithms (VQAs) are considered as one of the most promising candidates for achieving quantum advantages on quantum devices in the noisy intermediate-scale quantum (NISQ) era. They have been developed for numerous applications such as image processing and solving linear systems of equations. The application of VQAs can be greatly enlarged if users with limited quantum capabilities can run them on remote powerful quantum computers. But the private data of clients may be leaked to quantum servers in such a quantum cloud model. To solve the problem, a novel quantum homomorphic encryption (QHE) scheme which is client-friendly and suitable for VQAs is constructed for quantum servers to calculate encrypted data. Then delegated VQAs are proposed based on the given QHE scheme, where the server can train the ansatz circuit using the client's data even without knowing the real input and the output of the client. Furthermore, a delegated variational quantum classifier to identify handwritten digit images is given as a specific example of delegated VQAs and simulated on the cloud platform of Original Quantum to show its feasibility.
Variational quantum algorithms (VQAs) are considered as one of the most promising candidates for achieving quantum advantages on quantum devices in the noisy intermediate-scale quantum (NISQ) era. They have been developed for numerous applications such as image processing and solving linear systems of equations. The application of VQAs can be greatly enlarged if users with limited quantum capabilities can run them on remote powerful quantum computers. But the private data of clients may be leaked to quantum servers in such a quantum cloud model. To solve the problem, a novel quantum homomorphic encryption (QHE) scheme which is client-friendly and suitable for VQAs is constructed for quantum servers to calculate encrypted data. Then delegated VQAs are proposed based on the given QHE scheme, where the server can train the ansatz circuit using the client's data even without knowing the real input and the output of the client. Furthermore, a delegated variational quantum classifier to identify handwritten digit images is given as a specific example of delegated VQAs and simulated on the cloud platform of Original Quantum to show its feasibility.
Variational quantum algorithms (VQAs) can train parameterized quantum circuits via classical optimizers to find approximate solutions to some important problems. They can overcome the limitations of existing quantum technologies only allowing for a few qubits and small circuit depth and are considered as one of the most promising methods for achieving quantum advantages in the noisy intermediate-scale quantum (NISQ) era. In this paper, we propose secure delegated VQAs by utilizing quantum homomorphic encryption (QHE) for users with limited quantum power to delegate the task of running VQAs to remote quantum servers while still keeping the training data private. Firstly, a client-friendly QHE scheme that allows quantum servers to perform calculation on encrypted data is proposed to be suitable for VQAs. Then, delegated VQAs based on the given QHE scheme are presented, where servers can train the ansatz circuit using the encrypted data. Finally, a delegated variational quantum classifier to identify handwritten digit images is given as a specific example of delegated VQAs and simulated on the cloud platform of Original Quantum to show the feasibility. Secure delegated VQAs will provide significant technical support for future quantum cloud services.
Variational quantum algorithms (VQAs) have been considered to be useful applications of noisy intermediate-scale quantum (NISQ) devices. Typically, in VQAs, a parametrized ansatz circuit is used to generate a trial wave function, and the parameters are optimized to minimize a cost function. On the other hand, blind quantum computing (BQC) has been studied in order to provide a quantum algorithm with security by using cloud networks. A client with a limited ability to perform quantum operations hopes to have access to a quantum computer of a server, and BQC allows the client to use the server's computer without leakage of the client's information (such as input, running quantum algorithms, and output) to the server. However, BQC is designed for fault-tolerant quantum computing, and this requires many ancillary qubits, which may not be suitable for NISQ devices. Here, we propose an efficient way to implement the NISQ computing with guaranteed security for the client. In our architecture, only N+1 qubits are required, under an assumption that the form of ans\"atze is known to the server, where N denotes the necessary number of the qubits in the original NISQ algorithms. The client only performs single-qubit measurements on an ancillary qubit sent from the server, and the measurement angles can specify the parameters for the ans\"atze of the NISQ algorithms. The no-signaling principle guarantees that neither parameters chosen by the client nor the outputs of the algorithm are leaked to the server. This work paves the way for new applications of NISQ devices.
Variational quantum algorithms (VQAs) have emerged as promising candidates for solving complex optimization and machine learning tasks on near-term quantum hardware. However, executing quantum operations remains challenging for small-scale users because of several hardware constraints, making it desirable to delegate parts of the computation to more powerful quantum devices. In this work, we introduce a framework for delegated variational quantum algorithms, where a client with limited quantum capabilities delegates the execution of a VQA to a more powerful quantum server. In particular, we introduce a protocol that enables a client to delegate a variational quantum algorithm to a server while ensuring that the input, the output, and also the computation itself remain secret. Additionally, if the protocol does not abort, the client can be certain that the computation outcome is indeed correct. This work builds on the general verification protocol introduced by Fitzsimons and Kashefi [], tailoring it to VQAs. Our approach first proposes a verifiable protocol for delegating the quantum computation at each optimization step of a VQA and then combines the iterative steps into an error-resilient optimization process that offers end-to-end verifiable algorithm execution. We also simulate the performance of our protocol tackling the transverse field Ising model. Our results demonstrate that secure delegation of variational quantum algorithms is a realistic solution for near-term quantum networks, paving the way for practical quantum cloud computing applications.
Quantum machine learning in cloud environments requires protecting sensitive data while enabling remote computation. Here we demonstrate the first realistic implementations of a perfectly-secure quantum homomorphic encryption (QHE) scheme applied to quantum neural networks (QNN). Using efficient Clifford+T decomposition, we implement quantum convolutional neural networks for two complementary scenarios: (i) reverse delegated training, where encrypted data from multiple providers trains a user's network via federated aggregation; (ii) private inference, where users process encrypted data with remote quantum networks. Moreover, analysis of server circuit privacy reveals probabilistic model protection through Pauli gate concealment. These results establish perfectly-secure QHE as a practical framework for multi-party quantum machine learning.
Cloud computing allows clients with limited computational resources to offload computations to more powerful remote servers. In this paradigm, homomorphic encryption (HE) schemes enable a server to run any computation on a client's encrypted data. These schemes are widely used in cloud computing protocols such as delegated computing, two-party secure computation, and zero-knowledge proofs. Quantum homomorphic encryption (QHE) aims to achieve the objectives of HE with quantum data and quantum circuits, enabling cloud quantum servers to compute on encrypted quantum data uploaded by clients. In this work, we consider a scenario where a client has access to a quantum “encryption/decryption device”, which allows the encryption, transmission, reception, and decryption of quantum states, but not universal quantum computation. In this setting, we provide a proof-of-concept software simulation of quantum homomorphic encryption. Our code implements the “EPR scheme” of Broadbent and Jeffery, which allows for the execution of universal quantum circuits by the server at the cost of requiring shared EPR pairs between the client and server. Our implementation explores the near-term viability of the EPR scheme. Perhaps unsurprisingly, our experiments indicate that the additional cost of homomorphic circuit evaluation is minor in comparison to the simulation cost of the quantum operations. Our simulation toolkit is implemented in Python and is open-source.
Abstract Quantum learning models hold the potential to bring computational advantages over the classical realm. As powerful quantum servers become available on the cloud, ensuring the protection of clients’ private data becomes crucial. By incorporating quantum homomorphic encryption schemes, we present a general framework that enables quantum delegated and federated learning with a computation-theoretical data privacy guarantee. We show that learning and inference under this framework feature substantially lower communication complexity compared with schemes based on blind quantum computing. In addition, in the proposed quantum federated learning scenario, there is less computational burden on local quantum devices from the client side, since the server can operate on encrypted quantum data without extracting any information. We further prove that certain quantum speedups in supervised learning carry over to private delegated learning scenarios employing quantum kernel methods. Our results provide a valuable guide toward privacy-guaranteed quantum learning on the cloud, which may benefit future studies and security-related applications.