{"id":"https://openalex.org/W4415125297","doi":"https://doi.org/10.1109/icnp65844.2025.11192338","title":"PrivMLLM: Efficient Three-Party Multimodal Large Language Model Secure Inference Supported Prompt Privacy","display_name":"PrivMLLM: Efficient Three-Party Multimodal Large Language Model Secure Inference Supported Prompt Privacy","publication_year":2025,"publication_date":"2025-09-22","ids":{"openalex":"https://openalex.org/W4415125297","doi":"https://doi.org/10.1109/icnp65844.2025.11192338"},"language":"en","primary_location":{"id":"doi:10.1109/icnp65844.2025.11192338","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icnp65844.2025.11192338","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE 33rd International Conference on Network Protocols (ICNP)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5008489138","display_name":"Yujie Xue","orcid":"https://orcid.org/0000-0003-2559-1727"},"institutions":[{"id":"https://openalex.org/I170215575","display_name":"National University of Defense Technology","ror":"https://ror.org/05d2yfz11","country_code":"CN","type":"education","lineage":["https://openalex.org/I170215575"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yujie Xue","raw_affiliation_strings":["National University of Defense Technology,College of Computer Science and Technology,Changsha,China,410073"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National University of Defense Technology,College of Computer Science and Technology,Changsha,China,410073","institution_ids":["https://openalex.org/I170215575"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100383303","display_name":"Lin Liu","orcid":"https://orcid.org/0000-0002-5930-8881"},"institutions":[{"id":"https://openalex.org/I170215575","display_name":"National University of Defense Technology","ror":"https://ror.org/05d2yfz11","country_code":"CN","type":"education","lineage":["https://openalex.org/I170215575"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lin Liu","raw_affiliation_strings":["National University of Defense Technology,College of Computer Science and Technology,Changsha,China,410073"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National University of Defense Technology,College of Computer Science and Technology,Changsha,China,410073","institution_ids":["https://openalex.org/I170215575"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5007133001","display_name":"Yuchuan Luo","orcid":"https://orcid.org/0009-0008-8392-7392"},"institutions":[{"id":"https://openalex.org/I170215575","display_name":"National University of Defense Technology","ror":"https://ror.org/05d2yfz11","country_code":"CN","type":"education","lineage":["https://openalex.org/I170215575"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuchuan Luo","raw_affiliation_strings":["National University of Defense Technology,College of Computer Science and Technology,Changsha,China,410073"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National University of Defense Technology,College of Computer Science and Technology,Changsha,China,410073","institution_ids":["https://openalex.org/I170215575"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5003247518","display_name":"Bing Sun","orcid":"https://orcid.org/0000-0002-7403-8795"},"institutions":[{"id":"https://openalex.org/I170215575","display_name":"National University of Defense Technology","ror":"https://ror.org/05d2yfz11","country_code":"CN","type":"education","lineage":["https://openalex.org/I170215575"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Bing Sun","raw_affiliation_strings":["National University of Defense Technology,College of Science,Changsha,China,410073"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National University of Defense Technology,College of Science,Changsha,China,410073","institution_ids":["https://openalex.org/I170215575"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5032664581","display_name":"Shaojing Fu","orcid":"https://orcid.org/0000-0002-8155-7462"},"institutions":[{"id":"https://openalex.org/I170215575","display_name":"National University of Defense Technology","ror":"https://ror.org/05d2yfz11","country_code":"CN","type":"education","lineage":["https://openalex.org/I170215575"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shaojing Fu","raw_affiliation_strings":["National University of Defense Technology,College of Computer Science and Technology,Changsha,China,410073"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National University of Defense Technology,College of Computer Science and Technology,Changsha,China,410073","institution_ids":["https://openalex.org/I170215575"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I170215575"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"24"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.948199987411499,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.948199987411499,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/composability","display_name":"Composability","score":0.6972000002861023},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.6313999891281128},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.5354999899864197},{"id":"https://openalex.org/keywords/implementation","display_name":"Implementation","score":0.520799994468689},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.423799991607666},{"id":"https://openalex.org/keywords/embedding","display_name":"Embedding","score":0.4203000068664551},{"id":"https://openalex.org/keywords/secret-sharing","display_name":"Secret sharing","score":0.40880000591278076},{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.4068000018596649},{"id":"https://openalex.org/keywords/function","display_name":"Function (biology)","score":0.3968000113964081}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8234000205993652},{"id":"https://openalex.org/C2778814252","wikidata":"https://www.wikidata.org/wiki/Q5156715","display_name":"Composability","level":2,"score":0.6972000002861023},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.6313999891281128},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.5354999899864197},{"id":"https://openalex.org/C26713055","wikidata":"https://www.wikidata.org/wiki/Q245962","display_name":"Implementation","level":2,"score":0.520799994468689},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.423799991607666},{"id":"https://openalex.org/C41608201","wikidata":"https://www.wikidata.org/wiki/Q980509","display_name":"Embedding","level":2,"score":0.4203000068664551},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4146000146865845},{"id":"https://openalex.org/C3087436","wikidata":"https://www.wikidata.org/wiki/Q1386603","display_name":"Secret sharing","level":3,"score":0.40880000591278076},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.4068000018596649},{"id":"https://openalex.org/C14036430","wikidata":"https://www.wikidata.org/wiki/Q3736076","display_name":"Function (biology)","level":2,"score":0.3968000113964081},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.3869999945163727},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.383899986743927},{"id":"https://openalex.org/C125411270","wikidata":"https://www.wikidata.org/wiki/Q18653","display_name":"Encoding (memory)","level":2,"score":0.375},{"id":"https://openalex.org/C137293760","wikidata":"https://www.wikidata.org/wiki/Q3621696","display_name":"Language model","level":2,"score":0.3693000078201294},{"id":"https://openalex.org/C2992525071","wikidata":"https://www.wikidata.org/wiki/Q50818671","display_name":"Federated learning","level":2,"score":0.3686999976634979},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.3452000021934509},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.3379000127315521},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3183000087738037},{"id":"https://openalex.org/C2780264999","wikidata":"https://www.wikidata.org/wiki/Q7445032","display_name":"Security domain","level":2,"score":0.31279999017715454},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3098999857902527},{"id":"https://openalex.org/C2779965156","wikidata":"https://www.wikidata.org/wiki/Q5227350","display_name":"Data sharing","level":3,"score":0.3043000102043152},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.29319998621940613},{"id":"https://openalex.org/C165751822","wikidata":"https://www.wikidata.org/wiki/Q7894118","display_name":"Universal composability","level":4,"score":0.27320000529289246},{"id":"https://openalex.org/C47487241","wikidata":"https://www.wikidata.org/wiki/Q5227230","display_name":"Data access","level":2,"score":0.2660999894142151},{"id":"https://openalex.org/C99221444","wikidata":"https://www.wikidata.org/wiki/Q1532069","display_name":"Private information retrieval","level":2,"score":0.25839999318122864},{"id":"https://openalex.org/C121822524","wikidata":"https://www.wikidata.org/wiki/Q5157582","display_name":"Computer security model","level":2,"score":0.2538999915122986},{"id":"https://openalex.org/C10511746","wikidata":"https://www.wikidata.org/wiki/Q899388","display_name":"Data security","level":3,"score":0.25369998812675476}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icnp65844.2025.11192338","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icnp65844.2025.11192338","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE 33rd International Conference on Network Protocols (ICNP)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320330944","display_name":"Nature","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":44,"referenced_works":["https://openalex.org/W202783116","https://openalex.org/W1499934958","https://openalex.org/W1969009977","https://openalex.org/W1987743852","https://openalex.org/W2088492763","https://openalex.org/W2112796928","https://openalex.org/W2400124473","https://openalex.org/W2560730294","https://openalex.org/W2604969030","https://openalex.org/W2895865029","https://openalex.org/W2947312908","https://openalex.org/W2963518342","https://openalex.org/W2979382951","https://openalex.org/W2990762906","https://openalex.org/W2994111940","https://openalex.org/W3003532255","https://openalex.org/W3003749448","https://openalex.org/W3016063723","https://openalex.org/W3093021001","https://openalex.org/W3108672920","https://openalex.org/W3109688427","https://openalex.org/W3216987697","https://openalex.org/W4214498702","https://openalex.org/W4283696039","https://openalex.org/W4293783465","https://openalex.org/W4293783482","https://openalex.org/W4308338766","https://openalex.org/W4385080307","https://openalex.org/W4385412524","https://openalex.org/W4388857541","https://openalex.org/W4389160811","https://openalex.org/W4390872692","https://openalex.org/W4390872915","https://openalex.org/W4392558639","https://openalex.org/W4393405312","https://openalex.org/W4400382079","https://openalex.org/W4401752902","https://openalex.org/W4402263660","https://openalex.org/W4402264258","https://openalex.org/W4405182488","https://openalex.org/W4408749899","https://openalex.org/W4408750063","https://openalex.org/W4408750076","https://openalex.org/W4409568327"],"related_works":[],"abstract_inverted_index":{"Multimodal":[0],"Large":[1],"Language":[2],"Models":[3],"(MLLMs)":[4],"represent":[5],"the":[6,80,151,159,194,214,220],"next":[7],"frontier":[8],"in":[9,178],"artificial":[10],"intelligence":[11],"(AI),":[12],"capable":[13],"of":[14,114],"processing":[15],"and":[16,24,29,72,100,128,133,144,157,185,200,217,226],"integrating":[17],"diverse":[18],"data":[19,40,93],"types":[20],"(text,":[21],"images,":[22],"audio":[23],"video)":[25],"for":[26,88,117,130,141,165,176],"richer":[27],"understanding":[28],"generation.":[30],"However,":[31],"their":[32],"potential":[33],"is":[34,104],"limited":[35],"by":[36,60],"privacy":[37,64],"constraints:":[38],"sensitive":[39],"resides":[41],"with":[42,193],"different":[43],"owners":[44,94],"who":[45],"must":[46],"keep":[47],"it":[48],"local,":[49],"while":[50,95],"MLLM":[51,73],"parameters":[52,99],"themselves":[53],"require":[54],"protection.":[55],"We":[56],"address":[57],"this":[58,75],"challenge":[59],"pioneering":[61],"complete":[62],"end-to-end":[63,161],"protection":[65],"that":[66,90,125,170],"simultaneously":[67],"secures":[68],"prompts,":[69],"multimedia":[70],"data,":[71],"parameters.In":[74],"work,":[76],"we":[77,212],"present":[78],"PrivMLLM,":[79],"first":[81,160],"general-purpose":[82],"secure":[83,162,174],"three-party":[84],"(3PC)":[85],"inference":[86,163,175],"framework":[87,156],"MLLMs":[89],"serves":[91],"two":[92],"protecting":[96],"both":[97],"model":[98],"inputs.":[101],"Our":[102],"approach":[103],"based":[105],"on":[106],"three":[107],"key":[108],"insights:":[109],"(1)":[110],"domain":[111],"knowledge-aware":[112],"optimization":[113],"fixed-point":[115],"arithmetic":[116],"global":[118],"performance":[119,232],"gains,":[120],"(2)":[121],"hybrid":[122],"secret-sharing":[123],"protocols":[124,140],"reduce":[126],"communication":[127],"rounds":[129],"linear/non-linear":[131],"operations,":[132],"(3)":[134],"constant-round":[135],"function":[136],"secret":[137],"sharing":[138],"(FSS)-based":[139],"private":[142],"embedding":[143],"maximum.We":[145],"formally":[146],"prove":[147],"PrivMLLM\u2019s":[148],"security":[149],"under":[150,179],"rigorous":[152],"Universal":[153],"Composability":[154],"(UC)":[155],"demonstrate":[158],"system":[164],"MLLMs.":[166],"Experimental":[167],"results":[168],"show":[169],"our":[171,190],"solution":[172],"enables":[173],"Llama3.2-11B-vision":[177],"0:5-minute":[180],"per":[181],"token,":[182],"achieving":[183,230],"16":[184],"8":[186],"speedups":[187],"compared":[188],"to":[189],"implementations":[191],"built":[192],"SOTA":[195,221],"2PC":[196],"(CrypTen<sup":[197],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[198,203],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">+</sup>)":[199],"3PC":[201],"(ABY<sup":[202],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">3+</sup>)":[204],"privacypreserving":[205],"machine":[206],"learning":[207],"(PPML)":[208],"frameworks":[209],"respectively.":[210],"Moreover,":[211],"benchmark":[213],"submodules":[215],"ViT":[216],"LLM":[218],"against":[219],"schemes,":[222],"SHAFT":[223],"(NDSS":[224],"2025)":[225],"SIGMA":[227],"(PETS":[228],"2024),":[229],"1:3~3\u00d7":[231],"gains.":[233]},"counts_by_year":[],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-14T00:00:00"}