{"id":"https://openalex.org/W4416961062","doi":"https://doi.org/10.1109/tifs.2025.3639994","title":"Practical Secure Inference Algorithm for a Fine-Tuned Large Language Model Based on Fully Homomorphic Encryption","display_name":"Practical Secure Inference Algorithm for a Fine-Tuned Large Language Model Based on Fully Homomorphic Encryption","publication_year":2025,"publication_date":"2025-12-03","ids":{"openalex":"https://openalex.org/W4416961062","doi":"https://doi.org/10.1109/tifs.2025.3639994"},"language":null,"primary_location":{"id":"doi:10.1109/tifs.2025.3639994","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2025.3639994","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5102490540","display_name":"Ruoyan Zhang","orcid":"https://orcid.org/0009-0006-2948-5832"},"institutions":[{"id":"https://openalex.org/I75689368","display_name":"Communication University of China","ror":"https://ror.org/04facbs33","country_code":"CN","type":"education","lineage":["https://openalex.org/I75689368"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ruoyan Zhang","raw_affiliation_strings":["Communication University of China, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0006-2948-5832","affiliations":[{"raw_affiliation_string":"Communication University of China, Beijing, China","institution_ids":["https://openalex.org/I75689368"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Zhongxiang Zheng","orcid":"https://orcid.org/0009-0002-6028-1812"},"institutions":[{"id":"https://openalex.org/I75689368","display_name":"Communication University of China","ror":"https://ror.org/04facbs33","country_code":"CN","type":"education","lineage":["https://openalex.org/I75689368"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhongxiang Zheng","raw_affiliation_strings":["Communication University of China, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0002-6028-1812","affiliations":[{"raw_affiliation_string":"Communication University of China, Beijing, China","institution_ids":["https://openalex.org/I75689368"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5120051138","display_name":"Wankang Bao","orcid":null},"institutions":[{"id":"https://openalex.org/I75689368","display_name":"Communication University of China","ror":"https://ror.org/04facbs33","country_code":"CN","type":"education","lineage":["https://openalex.org/I75689368"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wankang Bao","raw_affiliation_strings":["Communication University of China, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Communication University of China, Beijing, China","institution_ids":["https://openalex.org/I75689368"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I75689368"],"apc_list":null,"apc_paid":null,"fwci":1.6508,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.89283514,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":95,"max":97},"biblio":{"volume":"21","issue":null,"first_page":"17","last_page":"29"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.31459999084472656,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.31459999084472656,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.16329999268054962,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T14347","display_name":"Big Data and Digital Economy","score":0.1559000015258789,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/homomorphic-encryption","display_name":"Homomorphic encryption","score":0.8270999789237976},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.5622000098228455},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.5152000188827515},{"id":"https://openalex.org/keywords/overhead","display_name":"Overhead (engineering)","score":0.4553999900817871},{"id":"https://openalex.org/keywords/public-key-cryptography","display_name":"Public-key cryptography","score":0.44200000166893005},{"id":"https://openalex.org/keywords/computer-security-model","display_name":"Computer security model","score":0.3901999890804291},{"id":"https://openalex.org/keywords/provable-security","display_name":"Provable security","score":0.3781999945640564},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.373199999332428}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8658000230789185},{"id":"https://openalex.org/C158338273","wikidata":"https://www.wikidata.org/wiki/Q2154943","display_name":"Homomorphic encryption","level":3,"score":0.8270999789237976},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.5622000098228455},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.5152000188827515},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.499099999666214},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.4553999900817871},{"id":"https://openalex.org/C203062551","wikidata":"https://www.wikidata.org/wiki/Q201339","display_name":"Public-key cryptography","level":3,"score":0.44200000166893005},{"id":"https://openalex.org/C121822524","wikidata":"https://www.wikidata.org/wiki/Q5157582","display_name":"Computer security model","level":2,"score":0.3901999890804291},{"id":"https://openalex.org/C131672422","wikidata":"https://www.wikidata.org/wiki/Q852594","display_name":"Provable security","level":3,"score":0.3781999945640564},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.373199999332428},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.3675999939441681},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.36329999566078186},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.3343000113964081},{"id":"https://openalex.org/C99221444","wikidata":"https://www.wikidata.org/wiki/Q1532069","display_name":"Private information retrieval","level":2,"score":0.3330000042915344},{"id":"https://openalex.org/C41458344","wikidata":"https://www.wikidata.org/wiki/Q732577","display_name":"Publication","level":2,"score":0.3285999894142151},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.31040000915527344},{"id":"https://openalex.org/C10511746","wikidata":"https://www.wikidata.org/wiki/Q899388","display_name":"Data security","level":3,"score":0.30570000410079956},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.3034999966621399},{"id":"https://openalex.org/C192209626","wikidata":"https://www.wikidata.org/wiki/Q190909","display_name":"Focus (optics)","level":2,"score":0.3021000027656555},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.2944999933242798},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.287200003862381},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.2865000069141388},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.2728999853134155},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2702000141143799},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.26460000872612},{"id":"https://openalex.org/C137293760","wikidata":"https://www.wikidata.org/wiki/Q3621696","display_name":"Language model","level":2,"score":0.2513999938964844}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tifs.2025.3639994","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2025.3639994","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1280461693","display_name":null,"funder_award_id":"62202437","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G1980255884","display_name":null,"funder_award_id":"2025NCSF02018","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G3553046183","display_name":null,"funder_award_id":"62201525","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G5940949455","display_name":null,"funder_award_id":"12271306","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7124987584","display_name":null,"funder_award_id":"No. 12271306","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G8231868862","display_name":null,"funder_award_id":"No. 62302467","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G8447366672","display_name":null,"funder_award_id":"No. 62201525","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G8468650661","display_name":null,"funder_award_id":"No. 62202437","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G8928288485","display_name":null,"funder_award_id":"62302467","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":18,"referenced_works":["https://openalex.org/W1966731635","https://openalex.org/W2031533839","https://openalex.org/W2061949491","https://openalex.org/W2768174108","https://openalex.org/W2957780493","https://openalex.org/W2964199361","https://openalex.org/W3026923845","https://openalex.org/W3176628912","https://openalex.org/W4205991051","https://openalex.org/W4281806276","https://openalex.org/W4285294723","https://openalex.org/W4385245566","https://openalex.org/W4389428766","https://openalex.org/W4399516266","https://openalex.org/W4402302904","https://openalex.org/W4402667093","https://openalex.org/W4402783879","https://openalex.org/W4409837449"],"related_works":[],"abstract_inverted_index":{"Large":[0],"language":[1],"models":[2,108,127],"(LLMs)":[3],"are":[4,111,148,176],"currently":[5],"at":[6,19,359],"the":[7,10,20,30,34,88,92,155,163,167,173,180,187,195,199,205,209,212,218,259,270,274,278,281,284,297,305,312,320,326,351,355,360,368,373,386,397],"forefront":[8],"of":[9,26,172,186,273,283,314,330,389],"machine":[11],"learning":[12,331],"field,":[13],"showing":[14],"broad":[15],"application":[16],"prospects":[17],"but":[18],"same":[21,361],"time":[22],"presenting":[23],"certain":[24],"risks":[25],"privacy":[27],"leakage.":[28],"Both":[29],"training":[31],"datasets":[32,115],"and":[33,67,79,91,109,131,137,166,208,252,294,354],"user\u2019s":[35,306,352],"input":[36,90,353],"data":[37,225],"during":[38],"interactions":[39],"face":[40],"security":[41,69,247],"issues,":[42],"which":[43,376],"need":[44,190],"to":[45,75,191,237,325],"be":[46,192,227,323],"addressed":[47],"urgently":[48],"before":[49],"their":[50,300],"further":[51],"development.":[52],"To":[53,133],"address":[54],"this":[55,135,216,267,336,364],"problem,":[56],"we":[57,98,142,153,232,265,340,366],"combine":[58],"privacy-preserving":[59],"techniques":[60],"such":[61,128],"as":[62,129,162,258,372],"fully":[63],"homomorphic":[64],"encryption":[65],"(FHE)":[66],"provable":[68],"theory":[70],"with":[71,113,221,332,338],"parameter-efficient":[72],"fine-tuning":[73],"(PEFT)":[74],"propose":[76,233],"an":[77,343],"efficient":[78,136],"secure":[80,138],"inference":[81,139,293,344,387],"scheme":[82,391,398],"for":[83,123,319,346],"LLMs":[84,102,348],"that":[85,103,147,245,290,296,311,349,385,396],"protects":[86,299,350],"both":[87],"user-side\u2019s":[89],"server-side\u2019s":[93],"private":[94,114,168,188,213,224,260,301,357],"parameters.":[95],"More":[96],"specifically,":[97],"focus":[99],"on":[100,105,204,223,269],"pretrained":[101],"rely":[104],"open-sourced":[106,181],"base":[107,182,374],"then":[110],"fine-tuned":[112,347,378],"by":[116,379],"LoRA.":[117,380],"This":[118],"is":[119,202,377,399],"a":[120,234,239,288],"popular":[121],"roadmap":[122],"vertical":[124],"domain":[125],"large":[126],"LawGPT":[130],"BenTsao.":[132],"achieve":[134],"LLM":[140],"scheme,":[141],"use":[143,266,367],"two":[144,159],"key":[145],"technologies":[146],"summarized":[149],"below.":[150],"\u2022":[151,230],"First,":[152],"divide":[154],"whole":[156],"model":[157,249,316,370],"into":[158,242],"parts,":[160],"denoted":[161,257],"public":[164,174,200],"part":[165,175,189,201],"part.":[169,214],"The":[170,381],"weights":[171,302,358],"publicly":[177],"accessible":[178],"(e.g.,":[179,194],"model),":[183],"whereas":[184],"those":[185],"protected":[193],"LoRA":[196,271,285],"matrices).":[197],"Then,":[198],"deployed":[203],"client":[206],"side,":[207,276],"server":[210,275,298],"maintains":[211],"In":[215,363],"way,":[217],"overhead":[219],"associated":[220],"computing":[222],"can":[226,322,341],"greatly":[228],"reduced.":[229],"Second,":[231],"general":[235],"method":[236,268,337],"transform":[238],"linear":[240,261],"layer":[241,262],"another":[243],"one":[244],"provides":[246],"against":[248],"extraction":[250,317],"attacks":[251,318],"preserves":[253],"its":[254],"original":[255],"functionality,":[256],"(PLL).":[263],"Afterwards,":[264],"matrices":[272,286],"where":[277],"PLL":[279,321],"changes":[280],"computation":[282],"in":[287],"way":[289],"accomplishes":[291],"correct":[292],"ensures":[295],"without":[303],"restricting":[304],"input.":[307],"We":[308],"also":[309],"show":[310,384],"difficulty":[313],"performing":[315],"reduced":[324],"well-known":[327],"hard":[328],"problem":[329],"errors":[333],"(LWE).":[334],"Combining":[335],"FHE,":[339],"obtain":[342],"algorithm":[345],"server\u2019s":[356],"time.":[362],"paper,":[365],"open-source":[369],"ChatGLM2-6B":[371],"model,":[375],"experimental":[382],"results":[383],"efficiency":[388],"our":[390],"reaches":[392],"1.61":[393],"s/token,":[394],"demonstrating":[395],"highly":[400],"practical.":[401]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-06-26T08:34:08.712188","created_date":"2025-12-03T00:00:00"}