Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

arXiv:2508.20310 · IEEE International Conference on Quantum Computing and Engineering (QCE)

Differentially Private Federated Quantum Learning via Quantum Noise

Atit Pokharel, Ratun Rahman, Shaba Shaon, Thomas Morris, Dinh C. Nguyen

Published Aug 30, 2025• 6 citations
arXivHTMLPDF

Abstract

Quantum federated learning (QFL) enables collaborative training of quantum machine learning (QML) models across distributed quantum devices without raw data exchange. However, QFL remains vulnerable to adversarial attacks, where shared QML model updates can be exploited to undermine information privacy. In the context of noisy intermediate-scale quantum (NISQ) devices, a key question arises: How can inherent quantum noise be leveraged to enforce differential privacy (DP) and protect model information during training and communication? This paper explores a novel DP mechanism that harnesses quantum noise to safeguard quantum models throughout the QFL process. By tuning noise variance through measurement shots and depolarizing channel strength, our approach achieves desired DP levels tailored to NISQ constraints. Simulations demonstrate the framework's effectiveness by examining the relationship between differential privacy budget and noise parameters, as well as the trade-off between security and training accuracy. Additionally, we demonstrate the framework's robustness against an adversarial attack designed to compromise model performance using adversarial examples, with evaluations based on critical metrics such as accuracy on adversarial examples, confidence scores for correct predictions, and attack success rates. The results reveal a tunable trade-off between privacy and robustness, providing an efficient solution for secure QFL on NISQ devices with significant potential for reliable quantum computing applications.

DOI
10.1109/qce65121.2025.00173

Related papers

Federated Quantum Machine Learning with Differential Privacy

Rod Rofougaran, Shinjae Yoo, Huan-Hsin Tseng +1 more

The preservation of privacy is a critical concern in the implementation of artificial intelligence on sensitive training data. There are several techniques to preserve data privacy but quantum computations are inherently more secure due to the nocloning theorem, resulting in a most desirable computational platform on top of the potential quantum advantages. There have been prior works in protecting data privacy by Quantum Federated Learning (QFL) and Quantum Differential Privacy (QDP) studied independently. However, to the best of our knowledge, no prior work has addressed both QFL and QDP together yet. Here, we propose to combine these privacy-preserving methods and implement them on the quantum platform, so that we can achieve comprehensive protection against data leakage (QFL) and model inversion attacks (QDP). This implementation promises more efficient and secure artificial intelligence. In this paper, we present a successful implementation of these privacy-preservation methods by performing the binary classification of the Cats vs Dogs dataset. Using our quantum-classical machine learning model, we obtained a test accuracy of over 0.98, while maintaining epsilon values less than 1.3. We show that federated differentially private training is a viable privacy preservation method for quantum machine learning on Noisy Intermediate-Scale Quantum (NISQ) devices.

arXiv:2310.06973•IEEE International Conference on Acoustics Speech and Signal Processing•Mar 18, 2024•44 citations

Enhancing Gradient Variance and Differential Privacy in Quantum Federated Learning

Phan Duc Thien, Minh-Duong Nguyen, Quoc‐Viet Pham +1 more

Upon integrating Quantum Neural Network (QNN) as the local model, Quantum Federated Learning (QFL) has recently confronted notable challenges. Firstly, exploration is hindered over sharp minima, decreasing learning performance. Secondly, the steady gradient descent results in more stable and predictable model transmissions over wireless channels, making the model more susceptible to attacks from adversarial entities. Additionally, the local QFL model is vulnerable to noise produced by the quantum device's intermediate noise states, since it requires the use of quantum gates and circuits for training. This local noise becomes intertwined with learning parameters during training, impairing model precision and convergence rate. To address these issues, we propose a new QFL technique that incorporates differential privacy and introduces a dedicated noise estimation strategy to quantify and mitigate the impact of intermediate quantum noise. Furthermore, we design an adaptive noise generation scheme to alleviate privacy threats associated with the vanishing gradient variance phenomenon of QNN and enhance robustness against device noise. Experimental results demonstrate that our algorithm effectively balances convergence, reduces communication costs, and mitigates the adverse effects of intermediate quantum noise while maintaining strong privacy protection. Using real-world datasets, we achieved test accuracy of up to 98.47% for the MNIST dataset and 83.85% for the CIFAR-10 dataset while maintaining fast execution times.

arXiv:2509.05377•Sep 11, 2025•0 citations

Practical Quantum Federated Learning for Privacy-Sensitive Healthcare: Communication Efficiency and Noise Resilience

Suzukaze Kamei, Hideaki Kawaguchi, Takahiko Satoh

AI-driven medical diagnostics increasingly requires collaborative model training across institutions, yet centralizing patient data conflicts with privacy regulations. Federated Learning enables distributed training without raw data sharing, but remains vulnerable to gradient inversion and model leakage attacks. Furthermore, harvest-now-decrypt-later attacks render computationally secure protocols insufficient for protecting long-lived medical records. Quantum communication offers information-theoretic security immune to such threats, making Quantum Federated Learning (QFL) a compelling framework for healthcare. However, practical deployment is constrained by communication overhead and quantum channel noise. We present a systematic quantitative study of communication, convergence, and noise trade-offs in QFL, introducing two complementary strategies to reduce quantum transmissions: (1) structured parameter reduction via light-cone feature selection in parameterized quantum circuits, and (2) a Hybrid QFL architecture that dynamically switches between centralized and decentralized aggregation. We show that Hybrid QFL reduces total quantum transmissions from $3\,TNMP$, the cost of pure Centralized QFL, to $\{3t + 2(T - t)\}\,NMP$ over $T$ rounds while preserving near-centralized convergence. We further demonstrate that decentralized aggregation is more noise-resilient under depolarizing noise, and evaluate Steane code-based quantum error correction in high-noise regimes. Our results provide an integrated design framework for communication-efficient, noise-aware QFL, clarifying practical trade-offs for scalable quantum-secure distributed learning in healthcare.

quant-pharXiv:2603.03853•Mar 5, 2026•0 citations

Harnessing Inherent Noises for Privacy Preservation in Quantum Machine Learning

Keyi Ju, Xiaoqi Qin, Hui Zhong +3 more

Quantum computing revolutionizes the way of solving complex problems and handling vast datasets, which shows great potential to accelerate the machine learning process. However, data leakage in quantum machine learning (QML) may present privacy risks. Although differential privacy (DP), which protects privacy through the injection of artificial noise, is a well-established approach, its application in the QML domain remains under-explored. In this paper, we propose to harness inherent quantum noises to protect data privacy in QML. Especially, considering the Noisy Intermediate-Scale Quantum (NISQ) devices, we leverage the unavoidable shot noise and incoherent noise in quantum computing to preserve the privacy of QML models for binary classification. We mathematically analyze that the gradient of quantum circuit parameters in QML satisfies a Gaussian distribution, and derive the upper and lower bounds on its variance, which can potentially provide the DP guarantee. Through simulations, we show that a target privacy protection level can be achieved by running the quantum circuit a different number of times.

arXiv:2312.11126•International Conference on Communications•Jun 9, 2024•6 citations

Quantum Enhanced Federated Learning with Differential Privacy

S. M. Wazid Ullah, Madam Hussain Shah, Adeel Anjum

Quantum Federated Learning (QFL) integrates the principles of quantum mechanics with classical machine learning to address the privacy challenges in distributed learning settings. This study introduces a Quantum Enhanced Federated Learning framework with Differential Privacy (QE-FLDP), designed to enhance privacy protections by leveraging quantum mechanics principles. The framework uses a quantum feature engineering circuit that encodes classical data into high-dimensional quantum states through parameterized quantum gates, including Rx rotations and CNOT gates. To ensure privacy, Differential Privacy is incorporated via the Laplace mechanism to safeguard data during the training process. Additionally, the framework integrates Quantum Homomorphic Encryption (QHE), enabling secure computations on encrypted data without exposing the underlying information. Model updates are transmitted over quantum channels post-training, preserving data integrity and ensuring compliance with privacy standards. The QE-FLDP framework was evaluated on synthetic datasets, achieving an average Mean Squared Error (MSE) of 0.0143 and an R2 score of 0.987 over 100 training rounds. These results highlight the potential of quantum principles to improve both model accuracy and data privacy in distributed learning settings.

International Conference on Frontiers of Information Technology (FIT)•Dec 9, 2024•9 citations

Private training in quantum machine learning

Tigran Sedrakyan, Frédéric Grosshans, Elham Kashefi

With the emergence of machine learning (ML) models trained on large datasets containing potentially sensitive data, a major question in AI safety is how to make learning private with respect to the training data. Similar to classical machine learning, quantum machine learning (QML) models are not devoid of privacy vulnerabilities. Differential privacy (DP) is a standard tool for training ML models on sensitive data, but its impact in QML remains poorly understood. In this work we study private training in hybrid variational QML models using a classical private DP-SGD optimizer applied to pipelines with classical inputs and outputs. We analyze the interplay between gradient clipping and calibrated noise addition in DP-SGD, and its impact on optimization and accuracy for noisy and noiseless quantum models. We first explain why quantum noise does not provide a satisfactory replacement for the calibrated noise in DP-SGD for ensuring privacy. We then show how the deterministic bounds on gradient norms for a wide class of quantum models translate into explicit control of the detrimental clipping bias introduced by DP-SGD. Finally, we formulate a numerical comparison protocol under fixed clipping threshold and privacy budget and evaluate it on synthetic and image-classification tasks for equivalent quantum and classical models. Our results suggest that quantum models can retain higher accuracy in private-training regimes where the formal privacy guarantee is ensured by a classical DP-SGD mechanism.

quant-pharXiv:2606.29293•Jun 30, 2026•0 citations
Quantum federated learning (QFL) enables collaborative training of quantum machine learning (QML) models across distributed quantum devices without raw data exchange. However, QFL remains vulnerable to adversarial attacks, where shared QML model updates can be exploited to undermine information privacy. In the context of noisy intermediate-scale quantum (NISQ) devices, a key question arises: How can inherent quantum noise be leveraged to enforce differential privacy (DP) and protect model information during training and communication? This paper explores a novel DP mechanism that harnesses quantum noise to safeguard quantum models throughout the QFL process. By tuning noise variance through measurement shots and depolarizing channel strength, our approach achieves desired DP levels tailored to NISQ constraints. Simulations demonstrate the framework's effectiveness by examining the relationship between differential privacy budget and noise parameters, as well as the trade-off between security and training accuracy. Additionally, we demonstrate the framework's robustness against an adversarial attack designed to compromise model performance using adversarial examples, with evaluations based on critical metrics such as accuracy on adversarial examples, confidence scores for correct predictions, and attack success rates. The results reveal a tunable trade-off between privacy and robustness, providing an efficient solution for secure QFL on NISQ devices with significant potential for reliable quantum computing applications.
The preservation of privacy is a critical concern in the implementation of artificial intelligence on sensitive training data. There are several techniques to preserve data privacy but quantum computations are inherently more secure due to the nocloning theorem, resulting in a most desirable computational platform on top of the potential quantum advantages. There have been prior works in protecting data privacy by Quantum Federated Learning (QFL) and Quantum Differential Privacy (QDP) studied independently. However, to the best of our knowledge, no prior work has addressed both QFL and QDP together yet. Here, we propose to combine these privacy-preserving methods and implement them on the quantum platform, so that we can achieve comprehensive protection against data leakage (QFL) and model inversion attacks (QDP). This implementation promises more efficient and secure artificial intelligence. In this paper, we present a successful implementation of these privacy-preservation methods by performing the binary classification of the Cats vs Dogs dataset. Using our quantum-classical machine learning model, we obtained a test accuracy of over 0.98, while maintaining epsilon values less than 1.3. We show that federated differentially private training is a viable privacy preservation method for quantum machine learning on Noisy Intermediate-Scale Quantum (NISQ) devices.
Upon integrating Quantum Neural Network (QNN) as the local model, Quantum Federated Learning (QFL) has recently confronted notable challenges. Firstly, exploration is hindered over sharp minima, decreasing learning performance. Secondly, the steady gradient descent results in more stable and predictable model transmissions over wireless channels, making the model more susceptible to attacks from adversarial entities. Additionally, the local QFL model is vulnerable to noise produced by the quantum device's intermediate noise states, since it requires the use of quantum gates and circuits for training. This local noise becomes intertwined with learning parameters during training, impairing model precision and convergence rate. To address these issues, we propose a new QFL technique that incorporates differential privacy and introduces a dedicated noise estimation strategy to quantify and mitigate the impact of intermediate quantum noise. Furthermore, we design an adaptive noise generation scheme to alleviate privacy threats associated with the vanishing gradient variance phenomenon of QNN and enhance robustness against device noise. Experimental results demonstrate that our algorithm effectively balances convergence, reduces communication costs, and mitigates the adverse effects of intermediate quantum noise while maintaining strong privacy protection. Using real-world datasets, we achieved test accuracy of up to 98.47% for the MNIST dataset and 83.85% for the CIFAR-10 dataset while maintaining fast execution times.
AI-driven medical diagnostics increasingly requires collaborative model training across institutions, yet centralizing patient data conflicts with privacy regulations. Federated Learning enables distributed training without raw data sharing, but remains vulnerable to gradient inversion and model leakage attacks. Furthermore, harvest-now-decrypt-later attacks render computationally secure protocols insufficient for protecting long-lived medical records. Quantum communication offers information-theoretic security immune to such threats, making Quantum Federated Learning (QFL) a compelling framework for healthcare. However, practical deployment is constrained by communication overhead and quantum channel noise. We present a systematic quantitative study of communication, convergence, and noise trade-offs in QFL, introducing two complementary strategies to reduce quantum transmissions: (1) structured parameter reduction via light-cone feature selection in parameterized quantum circuits, and (2) a Hybrid QFL architecture that dynamically switches between centralized and decentralized aggregation. We show that Hybrid QFL reduces total quantum transmissions from 3 TNMP3\,TNMP3TNMP, the cost of pure Centralized QFL, to {3t+2(T−t)} NMP\{3t + 2(T - t)\}\,NMP{3t+2(T−t)}NMP over TTT rounds while preserving near-centralized convergence. We further demonstrate that decentralized aggregation is more noise-resilient under depolarizing noise, and evaluate Steane code-based quantum error correction in high-noise regimes. Our results provide an integrated design framework for communication-efficient, noise-aware QFL, clarifying practical trade-offs for scalable quantum-secure distributed learning in healthcare.
Quantum computing revolutionizes the way of solving complex problems and handling vast datasets, which shows great potential to accelerate the machine learning process. However, data leakage in quantum machine learning (QML) may present privacy risks. Although differential privacy (DP), which protects privacy through the injection of artificial noise, is a well-established approach, its application in the QML domain remains under-explored. In this paper, we propose to harness inherent quantum noises to protect data privacy in QML. Especially, considering the Noisy Intermediate-Scale Quantum (NISQ) devices, we leverage the unavoidable shot noise and incoherent noise in quantum computing to preserve the privacy of QML models for binary classification. We mathematically analyze that the gradient of quantum circuit parameters in QML satisfies a Gaussian distribution, and derive the upper and lower bounds on its variance, which can potentially provide the DP guarantee. Through simulations, we show that a target privacy protection level can be achieved by running the quantum circuit a different number of times.
Quantum Federated Learning (QFL) integrates the principles of quantum mechanics with classical machine learning to address the privacy challenges in distributed learning settings. This study introduces a Quantum Enhanced Federated Learning framework with Differential Privacy (QE-FLDP), designed to enhance privacy protections by leveraging quantum mechanics principles. The framework uses a quantum feature engineering circuit that encodes classical data into high-dimensional quantum states through parameterized quantum gates, including Rx rotations and CNOT gates. To ensure privacy, Differential Privacy is incorporated via the Laplace mechanism to safeguard data during the training process. Additionally, the framework integrates Quantum Homomorphic Encryption (QHE), enabling secure computations on encrypted data without exposing the underlying information. Model updates are transmitted over quantum channels post-training, preserving data integrity and ensuring compliance with privacy standards. The QE-FLDP framework was evaluated on synthetic datasets, achieving an average Mean Squared Error (MSE) of 0.0143 and an R2 score of 0.987 over 100 training rounds. These results highlight the potential of quantum principles to improve both model accuracy and data privacy in distributed learning settings.
With the emergence of machine learning (ML) models trained on large datasets containing potentially sensitive data, a major question in AI safety is how to make learning private with respect to the training data. Similar to classical machine learning, quantum machine learning (QML) models are not devoid of privacy vulnerabilities. Differential privacy (DP) is a standard tool for training ML models on sensitive data, but its impact in QML remains poorly understood. In this work we study private training in hybrid variational QML models using a classical private DP-SGD optimizer applied to pipelines with classical inputs and outputs. We analyze the interplay between gradient clipping and calibrated noise addition in DP-SGD, and its impact on optimization and accuracy for noisy and noiseless quantum models. We first explain why quantum noise does not provide a satisfactory replacement for the calibrated noise in DP-SGD for ensuring privacy. We then show how the deterministic bounds on gradient norms for a wide class of quantum models translate into explicit control of the detrimental clipping bias introduced by DP-SGD. Finally, we formulate a numerical comparison protocol under fixed clipping threshold and privacy budget and evaluate it on synthetic and image-classification tasks for equivalent quantum and classical models. Our results suggest that quantum models can retain higher accuracy in private-training regimes where the formal privacy guarantee is ensured by a classical DP-SGD mechanism.