Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

arXiv:2310.06973 · IEEE International Conference on Acoustics Speech and Signal Processing

Federated Quantum Machine Learning with Differential Privacy

Rod Rofougaran, Shinjae Yoo, Huan-Hsin Tseng, Samuel Yen-Chi Chen

Published Mar 18, 2024• 44 citations
arXivHTMLPDF

Abstract

The preservation of privacy is a critical concern in the implementation of artificial intelligence on sensitive training data. There are several techniques to preserve data privacy but quantum computations are inherently more secure due to the nocloning theorem, resulting in a most desirable computational platform on top of the potential quantum advantages. There have been prior works in protecting data privacy by Quantum Federated Learning (QFL) and Quantum Differential Privacy (QDP) studied independently. However, to the best of our knowledge, no prior work has addressed both QFL and QDP together yet. Here, we propose to combine these privacy-preserving methods and implement them on the quantum platform, so that we can achieve comprehensive protection against data leakage (QFL) and model inversion attacks (QDP). This implementation promises more efficient and secure artificial intelligence. In this paper, we present a successful implementation of these privacy-preservation methods by performing the binary classification of the Cats vs Dogs dataset. Using our quantum-classical machine learning model, we obtained a test accuracy of over 0.98, while maintaining epsilon values less than 1.3. We show that federated differentially private training is a viable privacy preservation method for quantum machine learning on Noisy Intermediate-Scale Quantum (NISQ) devices.

DOI
10.1109/icassp48485.2024.10447155

Related papers

Quantum machine learning with differential privacy

William M. Watkins, Samuel Yen-Chi Chen, Shinjae Yoo

Quantum machine learning (QML) can complement the growing trend of using learned models for a myriad of classification tasks, from image recognition to natural speech processing. There exists the potential for a quantum advantage due to the intractability of quantum operations on a classical computer. Many datasets used in machine learning are crowd sourced or contain some private information, but to the best of our knowledge, no current QML models are equipped with privacy-preserving features. This raises concerns as it is paramount that models do not expose sensitive information. Thus, privacy-preserving algorithms need to be implemented with QML. One solution is to make the machine learning algorithm differentially private, meaning the effect of a single data point on the training dataset is minimized. Differentially private machine learning models have been investigated, but differential privacy has not been thoroughly studied in the context of QML. In this study, we develop a hybrid quantum-classical model that is trained to preserve privacy using differentially private optimization algorithm. This marks the first proof-of-principle demonstration of privacy-preserving QML. The experiments demonstrate that differentially private QML can protect user-sensitive information without signficiantly diminishing model accuracy. Although the quantum model is simulated and tested on a classical computer, it demonstrates potential to be efficiently implemented on near-term quantum devices [noisy intermediate-scale quantum (NISQ)]. The approach's success is illustrated via the classification of spatially classed two-dimensional datasets and a binary MNIST classification. This implementation of privacy-preserving QML will ensure confidentiality and accurate learning on NISQ technology.

arXiv:2103.06232•Scientific Reports•Feb 11, 2023•83 citations

Federated Learning in Quantum Computing for Privacy-Preserving and Distributed Quantum Model Training

Purna chander Mashetty, Srikanth Chittipothu, Naga Venkatesh Gangabathula +3 more

The mix of quantum computing and machine learning has introduced strong quantum models able to resolve challenging tasks efficiently. Still, the use of centralized QML systems could present challenges with privacy because sharing quantum data with untrusted aggregators is especially risky. This study describes a method called Privacy-Preserving Quantum Federated Learning (PQFL), which allows multiple clients to jointly train quantum models while maintaining data confidentiality. This system offers security by combining QHE and QDP to cover the processes of aggregating protected models and enforcing privacy on the data. Hybrid quantum-classical studies reveal that PQFL is both accurate and advanced in protecting privacy and communication security. According to these results, PQFL works effectively in privacy-friendly domains including healthcare, genomics, and finance, where data needs to be managed securely.

International Conference on Data Intelligence and Cognitive Informatics (ICDICI)•Jul 9, 2025•14 citations

Differentially Private Federated Quantum Learning via Quantum Noise

Atit Pokharel, Ratun Rahman, Shaba Shaon +2 more

Quantum federated learning (QFL) enables collaborative training of quantum machine learning (QML) models across distributed quantum devices without raw data exchange. However, QFL remains vulnerable to adversarial attacks, where shared QML model updates can be exploited to undermine information privacy. In the context of noisy intermediate-scale quantum (NISQ) devices, a key question arises: How can inherent quantum noise be leveraged to enforce differential privacy (DP) and protect model information during training and communication? This paper explores a novel DP mechanism that harnesses quantum noise to safeguard quantum models throughout the QFL process. By tuning noise variance through measurement shots and depolarizing channel strength, our approach achieves desired DP levels tailored to NISQ constraints. Simulations demonstrate the framework's effectiveness by examining the relationship between differential privacy budget and noise parameters, as well as the trade-off between security and training accuracy. Additionally, we demonstrate the framework's robustness against an adversarial attack designed to compromise model performance using adversarial examples, with evaluations based on critical metrics such as accuracy on adversarial examples, confidence scores for correct predictions, and attack success rates. The results reveal a tunable trade-off between privacy and robustness, providing an efficient solution for secure QFL on NISQ devices with significant potential for reliable quantum computing applications.

arXiv:2508.20310•IEEE International Conference on Quantum Computing and Engineering (QCE)•Aug 30, 2025•6 citations

Quantum Enhanced Federated Learning with Differential Privacy

S. M. Wazid Ullah, Madam Hussain Shah, Adeel Anjum

Quantum Federated Learning (QFL) integrates the principles of quantum mechanics with classical machine learning to address the privacy challenges in distributed learning settings. This study introduces a Quantum Enhanced Federated Learning framework with Differential Privacy (QE-FLDP), designed to enhance privacy protections by leveraging quantum mechanics principles. The framework uses a quantum feature engineering circuit that encodes classical data into high-dimensional quantum states through parameterized quantum gates, including Rx rotations and CNOT gates. To ensure privacy, Differential Privacy is incorporated via the Laplace mechanism to safeguard data during the training process. Additionally, the framework integrates Quantum Homomorphic Encryption (QHE), enabling secure computations on encrypted data without exposing the underlying information. Model updates are transmitted over quantum channels post-training, preserving data integrity and ensuring compliance with privacy standards. The QE-FLDP framework was evaluated on synthetic datasets, achieving an average Mean Squared Error (MSE) of 0.0143 and an R2 score of 0.987 over 100 training rounds. These results highlight the potential of quantum principles to improve both model accuracy and data privacy in distributed learning settings.

International Conference on Frontiers of Information Technology (FIT)•Dec 9, 2024•9 citations

Scaling Trust in Quantum Federated Learning: A Multi-Protocol Privacy Design

Dev Gurung, Shiva Raj Pokhrel

Quantum Federated Learning (QFL) promises to revolutionize distributed machine learning by combining the computational power of quantum devices with collaborative model training. Yet, privacy of both data and models remains a critical challenge. In this work, we propose a privacy-preserving QFL framework where a network of $n$ quantum devices trains local models and transmits them to a central server under a multi-layered privacy protocol. Our design leverages Singular Value Decomposition (SVD), Quantum Key Distribution (QKD), and Analytic Quantum Gradient Descent (AQGD) to secure data preparation, model sharing, and training stages. Through theoretical analysis and experiments on contemporary quantum platforms and datasets, we demonstrate that the framework robustly safeguards data and model confidentiality while maintaining training efficiency.

arXiv:2512.03358•Dec 3, 2025•0 citations

Quantum Federated Learning: Bridging Quantum Computing and Distributed AI

Tariq Qayyum, Manzoor Ahmed Khan, Asadullah Tariq +4 more

In recent years, the growing demand for secure, efficient, and scalable machine learning has highlighted significant challenges in traditional Federated Learning (FL) systems. These challenges include computational inefficiencies in handling large-scale, high-dimensional data, privacy concerns, and the limitations of classical hardware in solving complex optimization problems. Additionally, the increasing complexity of data and the need for more robust privacy-preserving methods have pushed the boundaries of classical FL. To address these issues, this paper presents a detailed framework for Quantum Federated Learning (QFL), where quantum computing and FL converge to enable distributed quantum model training with enhanced privacy preservation. The system is modeled using local quantum models on clients and a global aggregation strategy at the server. We develop quantum gradient-based optimization with quantum cross-entropy loss, privacy preservation through encryption, and robustness to quantum noise. A set of theorems is provided to prove the correctness and efficiency of the model, supported by rigorous mathematical formulations. We used IBM Qiskit for the simulation and compared our proposed QFL with classical FL. The results demonstrate that our QFL outperformed classical FL in terms of accuracy, precision, recall, and F1 score.

IEEE/ACM International Conference on Utility and Cloud Computing (UCC)•Dec 16, 2024•4 citations
The preservation of privacy is a critical concern in the implementation of artificial intelligence on sensitive training data. There are several techniques to preserve data privacy but quantum computations are inherently more secure due to the nocloning theorem, resulting in a most desirable computational platform on top of the potential quantum advantages. There have been prior works in protecting data privacy by Quantum Federated Learning (QFL) and Quantum Differential Privacy (QDP) studied independently. However, to the best of our knowledge, no prior work has addressed both QFL and QDP together yet. Here, we propose to combine these privacy-preserving methods and implement them on the quantum platform, so that we can achieve comprehensive protection against data leakage (QFL) and model inversion attacks (QDP). This implementation promises more efficient and secure artificial intelligence. In this paper, we present a successful implementation of these privacy-preservation methods by performing the binary classification of the Cats vs Dogs dataset. Using our quantum-classical machine learning model, we obtained a test accuracy of over 0.98, while maintaining epsilon values less than 1.3. We show that federated differentially private training is a viable privacy preservation method for quantum machine learning on Noisy Intermediate-Scale Quantum (NISQ) devices.
Quantum machine learning (QML) can complement the growing trend of using learned models for a myriad of classification tasks, from image recognition to natural speech processing. There exists the potential for a quantum advantage due to the intractability of quantum operations on a classical computer. Many datasets used in machine learning are crowd sourced or contain some private information, but to the best of our knowledge, no current QML models are equipped with privacy-preserving features. This raises concerns as it is paramount that models do not expose sensitive information. Thus, privacy-preserving algorithms need to be implemented with QML. One solution is to make the machine learning algorithm differentially private, meaning the effect of a single data point on the training dataset is minimized. Differentially private machine learning models have been investigated, but differential privacy has not been thoroughly studied in the context of QML. In this study, we develop a hybrid quantum-classical model that is trained to preserve privacy using differentially private optimization algorithm. This marks the first proof-of-principle demonstration of privacy-preserving QML. The experiments demonstrate that differentially private QML can protect user-sensitive information without signficiantly diminishing model accuracy. Although the quantum model is simulated and tested on a classical computer, it demonstrates potential to be efficiently implemented on near-term quantum devices [noisy intermediate-scale quantum (NISQ)]. The approach's success is illustrated via the classification of spatially classed two-dimensional datasets and a binary MNIST classification. This implementation of privacy-preserving QML will ensure confidentiality and accurate learning on NISQ technology.
The mix of quantum computing and machine learning has introduced strong quantum models able to resolve challenging tasks efficiently. Still, the use of centralized QML systems could present challenges with privacy because sharing quantum data with untrusted aggregators is especially risky. This study describes a method called Privacy-Preserving Quantum Federated Learning (PQFL), which allows multiple clients to jointly train quantum models while maintaining data confidentiality. This system offers security by combining QHE and QDP to cover the processes of aggregating protected models and enforcing privacy on the data. Hybrid quantum-classical studies reveal that PQFL is both accurate and advanced in protecting privacy and communication security. According to these results, PQFL works effectively in privacy-friendly domains including healthcare, genomics, and finance, where data needs to be managed securely.
Quantum federated learning (QFL) enables collaborative training of quantum machine learning (QML) models across distributed quantum devices without raw data exchange. However, QFL remains vulnerable to adversarial attacks, where shared QML model updates can be exploited to undermine information privacy. In the context of noisy intermediate-scale quantum (NISQ) devices, a key question arises: How can inherent quantum noise be leveraged to enforce differential privacy (DP) and protect model information during training and communication? This paper explores a novel DP mechanism that harnesses quantum noise to safeguard quantum models throughout the QFL process. By tuning noise variance through measurement shots and depolarizing channel strength, our approach achieves desired DP levels tailored to NISQ constraints. Simulations demonstrate the framework's effectiveness by examining the relationship between differential privacy budget and noise parameters, as well as the trade-off between security and training accuracy. Additionally, we demonstrate the framework's robustness against an adversarial attack designed to compromise model performance using adversarial examples, with evaluations based on critical metrics such as accuracy on adversarial examples, confidence scores for correct predictions, and attack success rates. The results reveal a tunable trade-off between privacy and robustness, providing an efficient solution for secure QFL on NISQ devices with significant potential for reliable quantum computing applications.
Quantum Federated Learning (QFL) integrates the principles of quantum mechanics with classical machine learning to address the privacy challenges in distributed learning settings. This study introduces a Quantum Enhanced Federated Learning framework with Differential Privacy (QE-FLDP), designed to enhance privacy protections by leveraging quantum mechanics principles. The framework uses a quantum feature engineering circuit that encodes classical data into high-dimensional quantum states through parameterized quantum gates, including Rx rotations and CNOT gates. To ensure privacy, Differential Privacy is incorporated via the Laplace mechanism to safeguard data during the training process. Additionally, the framework integrates Quantum Homomorphic Encryption (QHE), enabling secure computations on encrypted data without exposing the underlying information. Model updates are transmitted over quantum channels post-training, preserving data integrity and ensuring compliance with privacy standards. The QE-FLDP framework was evaluated on synthetic datasets, achieving an average Mean Squared Error (MSE) of 0.0143 and an R2 score of 0.987 over 100 training rounds. These results highlight the potential of quantum principles to improve both model accuracy and data privacy in distributed learning settings.
Quantum Federated Learning (QFL) promises to revolutionize distributed machine learning by combining the computational power of quantum devices with collaborative model training. Yet, privacy of both data and models remains a critical challenge. In this work, we propose a privacy-preserving QFL framework where a network of nnn quantum devices trains local models and transmits them to a central server under a multi-layered privacy protocol. Our design leverages Singular Value Decomposition (SVD), Quantum Key Distribution (QKD), and Analytic Quantum Gradient Descent (AQGD) to secure data preparation, model sharing, and training stages. Through theoretical analysis and experiments on contemporary quantum platforms and datasets, we demonstrate that the framework robustly safeguards data and model confidentiality while maintaining training efficiency.
In recent years, the growing demand for secure, efficient, and scalable machine learning has highlighted significant challenges in traditional Federated Learning (FL) systems. These challenges include computational inefficiencies in handling large-scale, high-dimensional data, privacy concerns, and the limitations of classical hardware in solving complex optimization problems. Additionally, the increasing complexity of data and the need for more robust privacy-preserving methods have pushed the boundaries of classical FL. To address these issues, this paper presents a detailed framework for Quantum Federated Learning (QFL), where quantum computing and FL converge to enable distributed quantum model training with enhanced privacy preservation. The system is modeled using local quantum models on clients and a global aggregation strategy at the server. We develop quantum gradient-based optimization with quantum cross-entropy loss, privacy preservation through encryption, and robustness to quantum noise. A set of theorems is provided to prove the correctness and efficiency of the model, supported by rigorous mathematical formulations. We used IBM Qiskit for the simulation and compared our proposed QFL with classical FL. The results demonstrate that our QFL outperformed classical FL in terms of accuracy, precision, recall, and F1 score.