{"id":{"repo_id":"uiuc","oai_identifier":"oai:www.ideals.illinois.edu:2142/132598"},"canonical_url":"https://search.dev.ndltd.org/etd/uiuc/oai:www.ideals.illinois.edu:2142/132598","repository":{"repo_id":"uiuc","name":"University of Illinois - Urbana-Champaign","base_url":"https://www.ideals.illinois.edu/oai-pmh"},"display":{"title":"PFHE: partially homomorphic encryption on CNN inference","abstract":"Fully Homomorphic Encryption (FHE) enables secure computation on encrypted data, but its high computational overhead poses significant challenges for practical deep learning inference. In many application scenarios, high-resolution images may only contain a small portion of sensitive information. We noticed that none of the previous works consider this, so in this work, we propose a new framework that accelerates encrypted Convolutional Neural Network (CNN) inference by only encrypting the privacy-sensitive regions of input while processing the remaining parts in plaintext. Our method significantly reduces computational cost without compromising data confidentiality. We developed a new data layout for ciphertexts to utilize the sparse nature of the data. Besides that, we first leverage the capability of FHE to scheme switch between different schemes, such as Cheon-Kim-Kim-Song (CKKS) and Fast Homomorphic Encryption over the Torus (FHEW), achieving the implementation of nonlinear activation like ReLU in CNN with high precision, without the consumption of a significant amount of multiplications. We evaluate our framework under the ImageNet dataset. For the first six convolutional layers, our method achieves at least 4.12× speedup in latency and 28.72× less memory usage compared to the traditional Channel-wise convolution method under various settings. We then present a case study for a hybrid solution, combining our partially FHE encrypted convolution method with Channel-wise convolution, which also shows a theoretical latency reduction of 10.30× and 33.30× less memory consumption.","abstract_html":"Fully Homomorphic Encryption (FHE) enables secure computation on encrypted data, but its high computational overhead poses significant challenges for practical deep learning inference. In many application scenarios, high-resolution images may only contain a small portion of sensitive information. We noticed that none of the previous works consider this, so in this work, we propose a new framework that accelerates encrypted Convolutional Neural Network (CNN) inference by only encrypting the privacy-sensitive regions of input while processing the remaining parts in plaintext. Our method significantly reduces computational cost without compromising data confidentiality. We developed a new data layout for ciphertexts to utilize the sparse nature of the data. Besides that, we first leverage the capability of FHE to scheme switch between different schemes, such as Cheon-Kim-Kim-Song (CKKS) and Fast Homomorphic Encryption over the Torus (FHEW), achieving the implementation of nonlinear activation like ReLU in CNN with high precision, without the consumption of a significant amount of multiplications. We evaluate our framework under the ImageNet dataset. For the first six convolutional layers, our method achieves at least 4.12× speedup in latency and 28.72× less memory usage compared to the traditional Channel-wise convolution method under various settings. We then present a case study for a hybrid solution, combining our partially FHE encrypted convolution method with Channel-wise convolution, which also shows a theoretical latency reduction of 10.30× and 33.30× less memory consumption.","abstract_has_math":false,"creators":["Dai, Bill"],"institution":"University of Illinois Urbana-Champaign","degree_name":"M.S.","degree_level":"Thesis","degree_discipline":"Electrical & Computer Engr","degree_department":null,"school":null,"contributors":["Chen, Deming"],"advisors":[],"committee_chairs":[],"committee_members":[],"year":2025,"date_issued":"2025-12","date_published":"2025-12","updated_at":"2026-07-22T22:25:07Z","subjects":["Homomorphic encryption","Machine learning","Cybersecurity","Privacy-preserved machine learning"],"languages":["en"],"rights":["Copyright 2025 Bill Dai"],"rights_urls":[],"identifier_entries":[]},"links":{"outbound_url":"https://hdl.handle.net/2142/132598","outbound_label":"Handle","outbound_source":"dc:identifier"},"metadata_groups":[{"id":"people","label":"People","entries":[{"key":"dc:contributor","label":"Contributor","values":["Chen, Deming"]},{"key":"dc:creator","label":"Author","values":["Dai, Bill"]}]},{"id":"academic_context","label":"Academic Context","entries":[{"key":"dc:date","label":"Dc Date","values":["2025-12","2025-12-11"]},{"key":"dc:type","label":"Dc Type","values":["text","Thesis"]},{"key":"thesis:degree_discipline","label":"Discipline","values":["Electrical & Computer Engr"]},{"key":"thesis:degree_level","label":"Degree Level","values":["Thesis"]},{"key":"thesis:degree_name","label":"Degree Name","values":["M.S."]},{"key":"thesis:institution_name","label":"Thesis Institution Name","values":["University of Illinois Urbana-Champaign"]}]},{"id":"subjects_keywords","label":"Subjects and Keywords","entries":[{"key":"dc:subject","label":"Dc Subject","values":["Homomorphic encryption","Machine learning","Cybersecurity","Privacy-preserved machine learning"]}]},{"id":"language_rights","label":"Language and Rights","entries":[{"key":"dc:language","label":"Dc Language","values":["en"]},{"key":"dc:rights","label":"Dc Rights","values":["Copyright 2025 Bill Dai"]}]},{"id":"identifiers","label":"Identifiers","entries":[{"key":"dc:identifier","label":"Identifier","values":["https://hdl.handle.net/2142/132598"]}]},{"id":"additional","label":"Additional Metadata","entries":[{"key":"dc:description","label":"Description","values":["Fully Homomorphic Encryption (FHE) enables secure computation on encrypted data, but its high computational overhead poses significant challenges for practical deep learning inference. In many application scenarios, high-resolution images may only contain a small portion of sensitive information. We noticed that none of the previous works consider this, so in this work, we propose a new framework that accelerates encrypted Convolutional Neural Network (CNN) inference by only encrypting the privacy-sensitive regions of input while processing the remaining parts in plaintext. Our method significantly reduces computational cost without compromising data confidentiality. We developed a new data layout for ciphertexts to utilize the sparse nature of the data. Besides that, we first leverage the capability of FHE to scheme switch between different schemes, such as Cheon-Kim-Kim-Song (CKKS) and Fast Homomorphic Encryption over the Torus (FHEW), achieving the implementation of nonlinear activation like ReLU in CNN with high precision, without the consumption of a significant amount of multiplications. We evaluate our framework under the ImageNet dataset. For the first six convolutional layers, our method achieves at least 4.12× speedup in latency and 28.72× less memory usage compared to the traditional Channel-wise convolution method under various settings. We then present a case study for a hybrid solution, combining our partially FHE encrypted convolution method with Channel-wise convolution, which also shows a theoretical latency reduction of 10.30× and 33.30× less memory consumption.","Submission original under an indefinite embargo labeled 'Open Access'. The submission was exported from vireo on 2026-02-19 without embargo terms","The student, Bill Dai, accepted the attached license on 2025-12-09 at 22:55.","The student, Bill Dai, submitted this Thesis for approval on 2025-12-11 at 10:21.","This Thesis was approved for publication on 2025-12-11 at 13:37.","DSpace SAF Submission Ingestion Package generated from Vireo submission #23117 on 2026-02-19 at 18:30:11"]},{"key":"dc:format","label":"Dc Format","values":["application/pdf"]},{"key":"dc:title","label":"Title","values":["PFHE: partially homomorphic encryption on CNN inference"]}]}],"canonical_facts":{"dc:contributor":["Chen, Deming"],"dc:creator":["Dai, Bill"],"dc:date":["2025-12","2025-12-11"],"dc:description":["Fully Homomorphic Encryption (FHE) enables secure computation on encrypted data, but its high computational overhead poses significant challenges for practical deep learning inference. In many application scenarios, high-resolution images may only contain a small portion of sensitive information. We noticed that none of the previous works consider this, so in this work, we propose a new framework that accelerates encrypted Convolutional Neural Network (CNN) inference by only encrypting the privacy-sensitive regions of input while processing the remaining parts in plaintext. Our method significantly reduces computational cost without compromising data confidentiality. We developed a new data layout for ciphertexts to utilize the sparse nature of the data. Besides that, we first leverage the capability of FHE to scheme switch between different schemes, such as Cheon-Kim-Kim-Song (CKKS) and Fast Homomorphic Encryption over the Torus (FHEW), achieving the implementation of nonlinear activation like ReLU in CNN with high precision, without the consumption of a significant amount of multiplications. We evaluate our framework under the ImageNet dataset. For the first six convolutional layers, our method achieves at least 4.12× speedup in latency and 28.72× less memory usage compared to the traditional Channel-wise convolution method under various settings. We then present a case study for a hybrid solution, combining our partially FHE encrypted convolution method with Channel-wise convolution, which also shows a theoretical latency reduction of 10.30× and 33.30× less memory consumption.","Submission original under an indefinite embargo labeled 'Open Access'. The submission was exported from vireo on 2026-02-19 without embargo terms","The student, Bill Dai, accepted the attached license on 2025-12-09 at 22:55.","The student, Bill Dai, submitted this Thesis for approval on 2025-12-11 at 10:21.","This Thesis was approved for publication on 2025-12-11 at 13:37.","DSpace SAF Submission Ingestion Package generated from Vireo submission #23117 on 2026-02-19 at 18:30:11"],"dc:format":["application/pdf"],"dc:identifier":["https://hdl.handle.net/2142/132598"],"dc:language":["en"],"dc:rights":["Copyright 2025 Bill Dai"],"dc:subject":["Homomorphic encryption","Machine learning","Cybersecurity","Privacy-preserved machine learning"],"dc:title":["PFHE: partially homomorphic encryption on CNN inference"],"dc:type":["text","Thesis"],"thesis:degree_discipline":["Electrical & Computer Engr"],"thesis:degree_level":["Thesis"],"thesis:degree_name":["M.S."],"thesis:institution_name":["University of Illinois Urbana-Champaign"]},"updated_at":"2026-07-22T22:25:07Z"}