PrivORL: Differentially Private Synthetic Dataset for Offline Reinforcement Learning
By: Chen Gong , Zheng Liu , Kecen Li and more
Potential Business Impact:
Creates private, fake data for AI learning.
Recently, offline reinforcement learning (RL) has become a popular RL paradigm. In offline RL, data providers share pre-collected datasets -- either as individual transitions or sequences of transitions forming trajectories -- to enable the training of RL models (also called agents) without direct interaction with the environments. Offline RL saves interactions with environments compared to traditional RL, and has been effective in critical areas, such as navigation tasks. Meanwhile, concerns about privacy leakage from offline RL datasets have emerged. To safeguard private information in offline RL datasets, we propose the first differential privacy (DP) offline dataset synthesis method, PrivORL, which leverages a diffusion model and diffusion transformer to synthesize transitions and trajectories, respectively, under DP. The synthetic dataset can then be securely released for downstream analysis and research. PrivORL adopts the popular approach of pre-training a synthesizer on public datasets, and then fine-tuning on sensitive datasets using DP Stochastic Gradient Descent (DP-SGD). Additionally, PrivORL introduces curiosity-driven pre-training, which uses feedback from the curiosity module to diversify the synthetic dataset and thus can generate diverse synthetic transitions and trajectories that closely resemble the sensitive dataset. Extensive experiments on five sensitive offline RL datasets show that our method achieves better utility and fidelity in both DP transition and trajectory synthesis compared to baselines. The replication package is available at the GitHub repository.
Similar Papers
PLRV-O: Advancing Differentially Private Deep Learning via Privacy Loss Random Variable Optimization
Cryptography and Security
Keeps AI learning private without losing accuracy.
Synthetic Data is Sufficient for Zero-Shot Visual Generalization from Offline Data
CV and Pattern Recognition
Makes robots learn better from old videos.
PrivCode: When Code Generation Meets Differential Privacy
Cryptography and Security
Makes AI write code without stealing secrets.