AI-driven medical diagnostics increasingly requires collaborative model training across institutions, yet centralizing patient data conflicts with privacy regulations. Federated Learning enables distributed training without raw data sharing, but remains vulnerable to gradient inversion and model leakage attacks. Furthermore, harvest-now-decrypt-later attacks render computationally secure protocols insufficient for protecting long-lived medical records. Quantum communication offers information-theoretic security immune to such threats, making Quantum Federated Learning (QFL) a compelling framework for healthcare. However, practical deployment is constrained by communication overhead and quantum channel noise. We present a systematic quantitative study of communication, convergence, and noise trade-offs in QFL, introducing two complementary strategies to reduce quantum transmissions: (1) structured parameter reduction via light-cone feature selection in parameterized quantum circuits, and (2) a Hybrid QFL architecture that dynamically switches between centralized and decentralized aggregation. We show that Hybrid QFL reduces total quantum transmissions from
3TNMP, the cost of pure Centralized QFL, to
{3t+2(T−t)}NMP over
T rounds while preserving near-centralized convergence. We further demonstrate that decentralized aggregation is more noise-resilient under depolarizing noise, and evaluate Steane code-based quantum error correction in high-noise regimes. Our results provide an integrated design framework for communication-efficient, noise-aware QFL, clarifying practical trade-offs for scalable quantum-secure distributed learning in healthcare.
Quantum federated learning (QFL) enables collaborative training of quantum machine learning (QML) models across distributed quantum devices without raw data exchange. However, QFL remains vulnerable to adversarial attacks, where shared QML model updates can be exploited to undermine information privacy. In the context of noisy intermediate-scale quantum (NISQ) devices, a key question arises: How can inherent quantum noise be leveraged to enforce differential privacy (DP) and protect model information during training and communication? This paper explores a novel DP mechanism that harnesses quantum noise to safeguard quantum models throughout the QFL process. By tuning noise variance through measurement shots and depolarizing channel strength, our approach achieves desired DP levels tailored to NISQ constraints. Simulations demonstrate the framework's effectiveness by examining the relationship between differential privacy budget and noise parameters, as well as the trade-off between security and training accuracy. Additionally, we demonstrate the framework's robustness against an adversarial attack designed to compromise model performance using adversarial examples, with evaluations based on critical metrics such as accuracy on adversarial examples, confidence scores for correct predictions, and attack success rates. The results reveal a tunable trade-off between privacy and robustness, providing an efficient solution for secure QFL on NISQ devices with significant potential for reliable quantum computing applications.