mmFHE: mmWave Sensing with End-to-End Fully Homomorphic Encryption

• URL: http://arxiv.org/abs/2603.22437v1
• Date: Mon, 23 Mar 2026 18:09:01 GMT
• Title: mmFHE: mmWave Sensing with End-to-End Fully Homomorphic Encryption
• Abstract summary: mmFHE is the first system that enables fully homomorphic encryption (FHE) for end-to-end mmWave radar sensing.<n> mmFHE encrypts raw range profiles on a lightweight edge device and executes the entire mmWave signal-processing and ML inference pipeline homomorphically on a untrusted cloud.
• Score: 17.64915325308135
• License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/
• Abstract: We present mmFHE, the first system that enables fully homomorphic encryption (FHE) for end-to-end mmWave radar sensing. mmFHE encrypts raw range profiles on a lightweight edge device and executes the entire mmWave signal-processing and ML inference pipeline homomorphically on an untrusted cloud that operates exclusively on ciphertexts. At the core of mmFHE is a library of seven composable, data-oblivious FHE kernels that replace standard DSP routines with fixed arithmetic circuits. These kernels can be flexibly composed into different application-specific pipelines. We demonstrate this approach on two representative tasks: vital-sign monitoring and gesture recognition. We formally prove two cryptographic guarantees for any pipeline assembled from this library: input privacy, the cloud learns nothing about the sensor data; and data obliviousness, the execution trace is identical on the cloud regardless of the data being processed. These guarantees effectively neutralize various supervised and unsupervised privacy attacks on raw data, including re-identification and data-dependent privacy leakage. Evaluation on three public radar datasets (270 vital-sign recordings, 600 gesture trials) shows that encryption introduces negligible error: HR/RR MAE <10^-3 bpm versus plaintext, and 84.5% gesture accuracy (vs. 84.7% plaintext) with end-to-end cloud GPU latency of 103s for a 10s vital-sign window and 37s for a 3s gesture window. These results show that privacy-preserving end-to-end mmWave sensing is feasible on commodity hardware today.

Related papers

• SecureDrive-FL: Joint Differential Privacy and Gradient-Aware Selective Homomorphic Encryption for Federated Driver Monitoring [0.3324986723090369]
  Federated Learning (FL) enables privacy-aware distributed training.<n>Man-in-the-Middle (MitM) interception exposes updates in transit.<n>SecureDrive-FL couples DP-SGD with GASHE to create the first closed-loop DP+HE privacy pipeline.
  arXiv  Detail & Related papers  (2026-08-27T13:24:33Z)
• OctoSense: Self-Supervised Learning for Multimodal Robot Perception [50.20346079739425]
  We present OctoSense, an open-source sensor platform with stereo and event cameras, LiDAR, a thermal camera, an inertial measurement unit, and proprioception (CAN bus data from a car, and joint angles for a quadruped robot)<n>The eponymous OctoSense dataset contains 59 hours of time-synchronized driving data across different types of environments at different times of the day.<n>We demonstrate multi-modal self-supervised learning using such real-world data, where sensors have different representations, frequencies, latencies and noise.
  arXiv  Detail & Related papers  (2026-06-25T17:30:49Z)
• Can Machine Learning Break Wi-Fi Privacy? A Study on MAC Address Randomization [2.5227912984325362]
  We show that devices remain identifiable using Machine Learning (ML)-based fingerprinting.<n>A core contribution of this paper is the bitwise decomposition of the High Throughput (HT) capabilities information field.<n>Our results show that DBSCAN, when using HT capabilities information and three SRSSI measurements, achieves a global accuracy up to 89.6%.
  arXiv  Detail & Related papers  (2026-06-24T13:07:05Z)
• WISV: Wireless-Informed Semantic Verification for Distributed Speculative Decoding in Device-Edge LLM Inference [56.297697169678095]
  WISV (Wireless-Informed Semantic Verification) is a novel distributed speculative decoding framework.<n>We show that WISV achieves up to a 60.8% increase in accepted length, a 37.3% reduction in interaction rounds, and a 31.4% improvement in end-to-end latency.<n>We validate WISV on a hardware testbed comprising an NVIDIA Jetson AGX Orin and an A40-equipped server.
  arXiv  Detail & Related papers  (2026-04-20T01:29:56Z)
• PrivyWave: Privacy-Aware Wireless Sensing of Heartbeat [19.430753110057754]
  Wireless sensing technologies can now detect heartbeats using radio frequency and acoustic signals.<n>Existing privacy solutions either protect from all sensing systems indiscriminately preventing any utility or operate post-data collection.<n>We present a key-based physical obfuscation system, PrivyWave, that addresses this challenge by generating controlled decoy heartbeat signals.
  arXiv  Detail & Related papers  (2025-11-04T20:54:59Z)
• Benchmarking Fraud Detectors on Private Graph Data [70.4654745317714]
  Currently, many types of fraud are managed in part by automated detection algorithms that operate over graphs.<n>We consider the scenario where a data holder wishes to outsource development of fraud detectors to third parties.<n>Third parties submit their fraud detectors to the data holder, who evaluates these algorithms on a private dataset and then publicly communicates the results.<n>We propose a realistic privacy attack on this system that allows an adversary to de-anonymize individuals' data based only on the evaluation results.
  arXiv  Detail & Related papers  (2025-07-30T03:20:15Z)
• PipeLLM: Fast and Confidential Large Language Model Services with Speculative Pipelined Encryption [5.667756833450548]
  encryption incurs a significant performance overhead. We introduce PipeLLM, a user-transparent runtime system. We propose speculative pipelined encryption to predict the data requiring encryption.
  arXiv  Detail & Related papers  (2024-11-04T19:58:53Z)
• Blind-Touch: Homomorphic Encryption-Based Distributed Neural Network Inference for Privacy-Preserving Fingerprint Authentication [8.61984933438984]
  Homomorphic encryption allows computations encrypted on data without decrypting. Blind-Touch can keep fingerprint data encrypted on the server while performing machine learning operations. Blind-Touch achieves high accuracy on two benchmark fingerprint datasets.
  arXiv  Detail & Related papers  (2023-12-18T09:05:34Z)
• Echoes Beyond Points: Unleashing the Power of Raw Radar Data in Multi-modality Fusion [74.84019379368807]
  We propose a novel method named EchoFusion to skip the existing radar signal processing pipeline. Specifically, we first generate the Bird's Eye View (BEV) queries and then take corresponding spectrum features from radar to fuse with other sensors.
  arXiv  Detail & Related papers  (2023-07-31T09:53:50Z)
• THE-X: Privacy-Preserving Transformer Inference with Homomorphic Encryption [112.02441503951297]
  Privacy-preserving inference of transformer models is on the demand of cloud service users. We introduce $textitTHE-X$, an approximation approach for transformers, which enables privacy-preserving inference of pre-trained models.
  arXiv  Detail & Related papers  (2022-06-01T03:49:18Z)
• Near-chip Dynamic Vision Filtering for Low-Bandwidth Pedestrian Detection [99.94079901071163]
  This paper presents a novel end-to-end system for pedestrian detection using Dynamic Vision Sensors (DVSs) We target applications where multiple sensors transmit data to a local processing unit, which executes a detection algorithm. Our detector is able to perform a detection every 450 ms, with an overall testing F1 score of 83%.
  arXiv  Detail & Related papers  (2020-04-03T17:36:26Z)
• CryptoSPN: Privacy-preserving Sum-Product Network Inference [84.88362774693914]
  We present a framework for privacy-preserving inference of sum-product networks (SPNs) CryptoSPN achieves highly efficient and accurate inference in the order of seconds for medium-sized SPNs.
  arXiv  Detail & Related papers  (2020-02-03T14:49:18Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.