TY - GEN
T1 - RzkFL
T2 - 8th IEEE International Conference on Blockchain, Blockchain 2025
AU - Alipanahloo, Zeinab
AU - Duchesne, Michael
AU - Zhang, Kaiwen
N1 - Publisher Copyright:
© 2025 IEEE.
PY - 2025
Y1 - 2025
N2 - RzkFL is an end-to-end, privacy-preserving machine-learning framework that fuses Federated Learning (FL) with recursive zero-knowledge proofs (ZKPs) to protect data, models, and users while unlocking verifiable inference. Models are trained entirely on local devices, so sensitive data never leave the premises. The resulting model can be monetized by offering verifiable predictions on a pay-per-use basis. During inference, each customer independently computes predictions using private data, making it essential to verify that these inference results are computed correctly and honestly. Unlike existing approaches that rely on heavy communication or centralized trust assumptions, RzkFL allows each customer to generate a cryptographic proof of correct local inference, which can be succinctly verified without revealing input data or model parameters either by the customer or a third party. The core innovation lies in the use of recursive ZKPs, enabling each customer to generate small, composable proofs for intermediate layers of neural network inference. These proofs are then recursively aggregated into a single succinct proof using the Nova proof folding scheme. Nova's design eliminates the traditional sequential dependency of recursive proofs by enabling incrementally verifiable computation through a folding scheme. RzkFL supports on-chain verification via Ethereum smart contracts, allowing AI results to flow directly into financial workflows. A decentralized file storage system maintains the integrity and availability of the global model. We introduce specialized circuits for input, hidden, and output layers to optimize proof generation time and gas costs. The customer can generate proof for the entire inference computation or delegate the proof generation for the intermediate layers and the output layer to another party. The design suits privacy-preserving machine learning scenarios where customer devices are resource-constrained. Our results show that RzkFL can significantly reduce proof size and verification costs while maintaining privacy, integrity, and scalability in federated inference. This makes it a compelling approach for real-world decentralized AI systems requiring strong verifiability guarantees.
AB - RzkFL is an end-to-end, privacy-preserving machine-learning framework that fuses Federated Learning (FL) with recursive zero-knowledge proofs (ZKPs) to protect data, models, and users while unlocking verifiable inference. Models are trained entirely on local devices, so sensitive data never leave the premises. The resulting model can be monetized by offering verifiable predictions on a pay-per-use basis. During inference, each customer independently computes predictions using private data, making it essential to verify that these inference results are computed correctly and honestly. Unlike existing approaches that rely on heavy communication or centralized trust assumptions, RzkFL allows each customer to generate a cryptographic proof of correct local inference, which can be succinctly verified without revealing input data or model parameters either by the customer or a third party. The core innovation lies in the use of recursive ZKPs, enabling each customer to generate small, composable proofs for intermediate layers of neural network inference. These proofs are then recursively aggregated into a single succinct proof using the Nova proof folding scheme. Nova's design eliminates the traditional sequential dependency of recursive proofs by enabling incrementally verifiable computation through a folding scheme. RzkFL supports on-chain verification via Ethereum smart contracts, allowing AI results to flow directly into financial workflows. A decentralized file storage system maintains the integrity and availability of the global model. We introduce specialized circuits for input, hidden, and output layers to optimize proof generation time and gas costs. The customer can generate proof for the entire inference computation or delegate the proof generation for the intermediate layers and the output layer to another party. The design suits privacy-preserving machine learning scenarios where customer devices are resource-constrained. Our results show that RzkFL can significantly reduce proof size and verification costs while maintaining privacy, integrity, and scalability in federated inference. This makes it a compelling approach for real-world decentralized AI systems requiring strong verifiability guarantees.
KW - Blockchain
KW - Federated Learning
KW - Nova Proof System
KW - On-chain Verification
KW - Privacy-Preserving Inference
KW - Recursive Proofs
KW - Zero-Knowledge Proofs
UR - https://www.scopus.com/pages/publications/105031372394
U2 - 10.1109/Blockchain67634.2025.00028
DO - 10.1109/Blockchain67634.2025.00028
M3 - Contribution to conference proceedings
AN - SCOPUS:105031372394
T3 - Proceedings - 2025 IEEE International Conference on Blockchain, Blockchain 2025
SP - 141
EP - 150
BT - Proceedings - 2025 IEEE International Conference on Blockchain, Blockchain 2025
PB - Institute of Electrical and Electronics Engineers Inc.
Y2 - 30 October 2025 through 2 November 2025
ER -