Exact Optimality of Communication-Privacy-Utility Tradeoffs in Distributed Mean Estimation

We study the mean estimation problem under communication and local differential privacy constraints. While previous work has proposed \emph{order}-optimal algorithms for the same problem (i.e., asymptotically optimal as we spend more bits), \emph{exact} optimality (in the non-asymptotic setting) still has not been achieved. In this work, we take a step towards characterizing the \emph{exact}-optimal approach in the presence of shared randomness (a random variable shared between the server and the user) and identify several conditions for \emph{exact} optimality. We prove that one of the conditions is to utilize a rotationally symmetric shared random codebook. Based on this, we propose a randomization mechanism where the codebook is a randomly rotated simplex -- satisfying the properties of the \emph{exact}-optimal codebook. The proposed mechanism is based on a $k$-closest encoding which we prove to be \emph{exact}-optimal for the randomly rotated simplex codebook.

Paper

References (41)

Scroll for more · 29 remaining

Similar papers

Peer review

Reviewer JsmV7/10 · confidence 3/52023-06-29

Summary

The authors consider the problem of high dimensional mean estimation with communication and privacy constraints. For federated learning or distributed SGD, model updates must be communicated to central server, but as models become much larger this can be a bottleneck within the computation. As a result, previous works has considered the setting in which there is a restriction on the number of bits that can be communicated, which the authors also follow. Furthermore, the authors consider the differentially private setting adding another constraint. This setting was also considered in previous work, some of which achieved optimality up to constant factors. The authors improve upon that work and achieve exact optimality and this theoretical improvement is backed by their empirical experiments.

Strengths

Improves upon previous work for a reasonably well-studied problem and achieve optimal tradeoff between communication-privacy-utility and further show how the previous work are special cases in their method.

Weaknesses

Minor gripe that some of the notation could have been expanded upon more clearly (for example: P_U-almost) but can understand that page limits can add difficulty.

Questions

None

Rating

7: Accept: Technically solid paper, with high impact on at least one sub-area, or moderate-to-high impact on more than one areas, with good-to-excellent evaluation, resources, reproducibility, and no unaddressed ethical considerations.

Confidence

3: You are fairly confident in your assessment. It is possible that you did not understand some parts of the submission or that you are unfamiliar with some pieces of related work. Math/other details were not carefully checked.

Soundness

4 excellent

Presentation

3 good

Contribution

3 good

Limitations

The authors adequately addressed the limitations

Reviewer jPit6/10 · confidence 4/52023-07-06

Summary

The paper studies the distributed mean estimation (DME) problem with communication & privacy constraints. The goal is to construct an unbiased estimate of a unit vector $v$ using $b$-bits that minimizes the mean squared error and provides $\epsilon$-LDP. It is well known that any scheme achieving the above communication will have to quantize the unit sphere using $M=2^b$ points. Further, to achieve $\epsilon$-LDP, a particular quantization point is chosen and returned according to an appropriate distribution. The main contribution of this work is characterizing DME schemes that achieve optimal error in the presence of a communication budget and privacy constraints. The authors show that a random set of points generated using a rotationally symmetric distribution will achieve the optimal error. The intuition is that such a point set will be maximally separated and will most efficiently cover the sphere. $\epsilon$-LDP is achieved using a randomized response mechanism.

Strengths

- Presents a DME scheme under exact communication constraints instead of asymptotic error bounds that are optimal. - The idea of treating the k-nearest codewords equally instead of just the closest seems to provide improvements over the prior works. This clean trick can be of independent interest.

Weaknesses

- The work provides sufficient conditions for a DME scheme to be optimal, i.e., an optimal scheme has a particular canonical setup. These conditions are not necessary, and not all schemes satisfying the canonical setup achieve optimal error. - Either some proofs have (probably fixable) errors, or I have misunderstood. So at least rephrasing or an elaborate explanation is required. Details are provided in the next section (Questions)

Questions

1) As mentioned in the paper, the prior works of SQKR, MMRC, and FT21 can be seen as specific instantiations of random codebooks. Could it be possible that their schemes are exact-optimal as well and satisfy the conditions mentioned in this work? While a discussion is provided, can you comment on what condition is not met by each of these that confirms that they are not exact-optimal? 2) Line 217-220 leading to Eq 29 needs further justification. Intuitively, this holds if the k points are equidistant, but I am not sure why the k-nearest neighbors will give an unbiased estimate. In the current manuscript, this is just a statement and not a formal proof of the fact that "k-closest encoding consistently yields an unbiased scheme for any rotationally symmetric codebook." Further, it would be good to mention that for a rotationally symmetric codebook, the $\sum_m U_m = 0$. 3) Proof of Lemma 3.7 - What is top-k set? I am assuming it is the set of k-nearest neighbors to random a in s^M Should the summation have only $s_m$ and not $a^Ts_m $? Typo in eq 94 - the second summation should be over s_i. Eq 96 shows that you get an unbiased estimate of $e_1$ and not $a$. Also, other coordinates cannot be ignored. $r_k$ value is roughly $M$, so the error of the RRSC scheme will be $\sim M^2$. So for $M = d$, there is an error of $d^2$ which is higher than the order optimal ones $(O(d/\log d))$ for the same amount of allowed communication. A brief clarification on this would be great. 4) For the shared randomness setup, will the server/nodes have to regenerate the codebook for each invocation of the algorithm? 5) Some suggestions to improve the readability in my opinion would be: - Fix errors in proofs or provide better justifications - In Equation 26 the probability of choosing the k+1-th closest codeword is zero if k is an integer. This seems to be inconsistent with Algorithm 1, and the analysis that follows in Section 3.4 - Clarify what the `=' in Def 3.3 means. It can be confusing to think that the two codebooks are equal (permutations of each other) rather than their distributions being identical.

Rating

6: Weak Accept: Technically solid, moderate-to-high impact paper, with no major concerns with respect to evaluation, resources, reproducibility, ethical considerations.

Confidence

4: You are confident in your assessment, but not absolutely certain. It is unlikely, but not impossible, that you did not understand some parts of the submission or that you are unfamiliar with some pieces of related work.

Soundness

3 good

Presentation

3 good

Contribution

3 good

Limitations

Yes

Reviewer eu7R7/10 · confidence 3/52023-07-07

Summary

This paper studies the mean estimation problem under communication and local differential privacy constraints in the non-asymptotic (exact optimal) setting, and proposed a randomization mechanism that satisfies the identified necessary property of the exact optimality.

Strengths

1. The authors proved a necessary condition that the codebook-generating distribution needs to be rotationally symmetric. 2. The authors further proposed the first exact optimality algorithm Random Rotating Simplex Coding (RRSC) that matches the necessary condition. 3. Empirical results in the paper showed that the proposed RRSC outperforms the state-of-art benchmarks (order-optimal) for the task. 4. The authors proposed interesting conjectures and clear future directions based on the design and properties of the algorithm.

Weaknesses

1. line 177, "an random" to "a random" 2. The design of k-closest encoding and Theorem 3.6 (along with its proof in the Appendix) lacks the intuition on k, which seems to be valuable to explore both theoretically and empirically (as stated in the conjecture).

Questions

For the choice of $k$, in the experiments are to minimize $C_k$ based on different $k$'s. How can such choice of $k$ guarantees the requirement in Theorem 3.6 (and its proof)?

Rating

7: Accept: Technically solid paper, with high impact on at least one sub-area, or moderate-to-high impact on more than one areas, with good-to-excellent evaluation, resources, reproducibility, and no unaddressed ethical considerations.

Confidence

3: You are fairly confident in your assessment. It is possible that you did not understand some parts of the submission or that you are unfamiliar with some pieces of related work. Math/other details were not carefully checked.

Soundness

3 good

Presentation

3 good

Contribution

3 good

Limitations

Lack of intuition on k as described in weakness.

Reviewer FeU27/10 · confidence 2/52023-07-07

Summary

This paper focuses on the problem of distributed mean estimation under local differential privacy (DP) and communication constraints, with shared randomness between users and the server. Previous works either achieve exact optimal mean squared error (MSE) using $O(d)$ bits or achieve order-optimal MSE with a large constant using $O(\varepsilon)$ bits. In this paper, the authors aim to tackle the same problem under shared randomness, aiming for both exact optimal MSE and communication efficiency. The proposed solution approaches the problem as a lossy compression problem. The authors demonstrate that the optimal scheme can be represented by a codebook through random coding. Additionally, they establish that the exact-optimal codebook-generating distribution must be rotationally symmetric. Empirically, the authors demonstrate that the proposed methods outperform existing approaches.

Strengths

1. This paper is very technical. The paper is clearly written and lays out its contributions succinctly. 2. The proposed framework achieves exact optimality in terms of both MSE and communication efficiency.

Weaknesses

It would be better if the authors could discuss why shared randomness is necessary to achieve exact optimality.

Questions

See weaknesses

Rating

7: Accept: Technically solid paper, with high impact on at least one sub-area, or moderate-to-high impact on more than one areas, with good-to-excellent evaluation, resources, reproducibility, and no unaddressed ethical considerations.

Confidence

2: You are willing to defend your assessment, but it is quite likely that you did not understand the central parts of the submission or that you are unfamiliar with some pieces of related work. Math/other details were not carefully checked.

Soundness

3 good

Presentation

4 excellent

Contribution

3 good

Limitations

The limitations are discussed. This paper does not have a negative societal impact

Reviewer 69ED6/10 · confidence 3/52023-07-10

Summary

This work considers the problem of distributed mean estimation and aims to obtain "exact optimal" estimators under communication, (local) differential privacy and utility constraints. Exact optimality here means that instead of focusing on the order of complexity, the focus is also on the constants as well. Prior work either focused on "order optimality" or were exactly optimal for privacy and utility but only order optimal [Feldman-Talwar'11], [Shah-Chen-Balle-Kairouz-Theis'22]. This work achieves exact optimality through a k-closest encoding and a randomly generated codebook shared between the server and users.

Strengths

They obtain exact optimality for privacy-utility-communication tradeoffs of mean estimation under l_2 norm error. This improves upon prior work that could only obtain order optimality or exact optimality but only for some parameters. Their work unifies the framework that existed in prior work [Feldman-Talwar'11], [Shah-Chen-Balle-Kairouz-Theis'22]. Their experiments show significant improvement in communication budget required compared to the previous work, especially in the setting where the number of bits is small. The theorem regarding optimality of rotationally symmetric shared random codebooks could be of independent interest.

Weaknesses

There is no "main theorem" that sums up the results in the main results section for mean estimation, and I think it's necessary to include such a theorem. I think exact optimality compared to order optimality is a more niche setting. That being said, that's not necessarily a weakness, and it could be impactful in practice.

Questions

I think part of the paragraph **unified framework** in the discussion section could be mentioned in the related work section as well. As mentioned in the previous section a main theorem that clearly states the trade offs this work obtain for mean estimation should be included. The score currently given is assuming that such a theorem will be included.

Rating

6: Weak Accept: Technically solid, moderate-to-high impact paper, with no major concerns with respect to evaluation, resources, reproducibility, ethical considerations.

Confidence

3: You are fairly confident in your assessment. It is possible that you did not understand some parts of the submission or that you are unfamiliar with some pieces of related work. Math/other details were not carefully checked.

Soundness

3 good

Presentation

2 fair

Contribution

3 good

Limitations

The authors have adequately addressed the limitations of their work.

Reviewer JsmV2023-08-14

Thanks for clarifying some of the notation and adding more detail in future versions of your work! The theorem statements in another rebuttal also added further clarity for me, and I appreciate the authors adding these details to future versions.

Authorsrebuttal2023-08-21

Thank you for your response to our rebuttal.

We thank the reviewer for their time reading our rebuttal. We will include the suggested details in the final manuscript.

Reviewer jPit2023-08-15

Thanks for the detailed response. MMRC: "MMRC introduces an importance sampling approach where samples are drawn based on a uniform distribution across the sphere, supplemented with a truncation technique. This is equivalent to producing i.i.d. codewords, which does not necessarily ensure maximal separation. We strongly believe that maximal separation of codewords, and hence the most effective coverage of the sphere, is important for exact optimality." iid codewords sampled from unit sphere = normalized high-dimensional Gaussians are with high probability good covers for the unit sphere. Eq 29: For Eq29, my concern remains. It is still not clear to me without proof why the sum of the top $k$ closest vectors to $e_1$ in a rotationally symmetric codebook will cancel out in all other directions. Even if trivial, please include it for people like me. For instance, in 2-dimensions, if I choose the codebook to be ${(0,1), (0,-1), (1,0), (-1,0)}$, and for $k=2$, the top $k$ closest to $e_1 = (1,0)$ will consist of ${(1,0), (0,1)}$ (or $(0,-1)$ depending on how you break ties.) which do not cancel out. For $k=3$, you will get this property. So I am guessing you mean to say that there exists a $k$, where the top-k will work. But even this will need proof and a bound on the value of $k$. Moreover, as stated in Algorithm 1, $k$ cannot be a part of the input. Order of $r_k$: I apologize for being technically challenged, but I could not find any attached pdf. However, I understand that the scaling of $r_k$ is roughly $(k + M)/C_k = O(M/C_k)$ ignoring the $\epsilon$ terms. While for large $k$, i.e., $k=O(M)$, $r_k$ scales as $\sqrt{d}$, for small $k =O(1)$, the scaling of $r_k$ seems to be roughly $O(M \sqrt{d})$. Non-integer $k$: Equation 26 will translate to choosing the top $floor{k}+1$, and the probabilities will not all sum to 1. There is a tiny typo here that needs to be fixed.

Authorsrebuttal2023-08-15

Thank you for your response to our rebuttal.

We thank the reviewer for reading our rebuttal in detail and following up with further questions. We respond to each question below. The **pdf** with a new algorithm (to find the optimal k) and a new figure (that shows how k changes with increasing M) is **attached to our general response titled "Author Rebuttal by Authors" in the top -- before the reviewers' comments.** ----- ##### **MMRC: "iid codewords sampled from unit sphere = normalized high-dimensional Gaussians are with high probability good covers for the unit sphere."** This holds true when sampling a large number of Gaussian vectors. However, when sampling a relatively small number of these vectors (as is our interest with a small $M$), it is essential to select the vectors judiciously to effectively cover the sphere. --- ##### **Eq 29:** The codebook is derived from a rotationally symmetric distribution through shared randomness, and any expectations are taken with respect to this distribution. Consider the codebook $\lbrace e_1, e_2, -e_1, -e_2\rbrace$ where $e_1 = (1,0)$ and $e_2 = (0, 1)$. This codebook is not rotationally symmetric. However, if $A$ is a uniformly sampled $2\times 2$ random rotation matrix, the codebook $\lbrace A e_1, A e_2, -A e_1, -A e_2\rbrace$ is rotationally symmetric. Given that $Ae_1$ has a uniform distribution on the sphere, the conditional expectation $\mathbb{E}[A e_1 |\mbox{$Ae_1$ is the closest to $e_1$}]$ can only contain the $e_1$ component. This is because the $e_2$ components cancel out due to symmetry. The reviewer is right that $k$ is not part of the input. As we show in Algorithm 1 in the attached pdf in our general response, the optimal $k$ is determined by $\varepsilon$, $d$, and $M$ by minimizing $r_k$. ---- #### **Order of $r_k$:** For every $M$, we determine the best value of $k$ that yields the smallest $r_k$. We contend that the optimal selection of $k$ increases linearly with $M$, as evidenced in the provided PDF in general response. This leads to $r_k = O(\sqrt{d})$. --- #### **Non-integer $k$:** We apologize for the confusing notation. For top-$\lfloor k\rfloor$ candidates, we assign probability $e^\epsilon / (ke^\epsilon+M-k)$. For the ($\lfloor k\rfloor +1$)-th candidate, we assign probability $\frac{(k-\lfloor k\rfloor)(e^\epsilon-1)+1}{ke^\epsilon+M-k}$. For the rest $M-\lfloor k \rfloor -1$ candidates, we assign probability $1 / (ke^\epsilon+M-k)$. The sum of the probabilities is 1. \begin{align*} \lfloor k \rfloor \times \frac{e^\epsilon}{ke^\epsilon+M-k} + \frac{(k-\lfloor k\rfloor)(e^\epsilon-1)+1}{ke^\epsilon+M-k} + (M-\lfloor k\rfloor -1) \times\frac{1}{ke^\epsilon+M-k} = 1 \end{align*} --- We thank the reviewer for their time in reading the manuscript and the rebuttal in detail. We hope our response addresses the reviewer's points. If there is any other concern or confusion remaining, we are more than happy to discuss them. If our response is satisfactory for the reviewer, we kindly ask them to consider revisiting their score.

Reviewer jPit2023-08-20

Thanks for the clarification. I have a much better understanding now. Stupid question: Why cannot you set k=M/2? Put a larger mass on all the codewords c with c_1 > 0 (assuming you are quantizing e_1). Would you not get $r_k = O(\sqrt{d})$ with this? This can be generalized: Instead of searching for the closest k = O(M) points, one could take O(1) random (or well-designed) hyperplanes and assign a higher probability to all the codewords with the same sign as the input. Keep adding hyperplanes until $r_k$ is $O(\sqrt{d})$.

Authorsrebuttal2023-08-21

Thank you for the question!

This is indeed a good point. Alternate selections of $k$ (e.g., $k = M/2$) and their respective generalizations appear to yield order optimality $r_k=O(\sqrt{d})$. Interestingly, this approach could reduce complexity while still achieving order optimality -- which could be studied independently in future work. However, in this work, our main concentration is on **exact optimality**. In the case of the rotated simplex codebook, we demonstrate that the $k$-closest encoding, with a carefully chosen $k$, attains this exact optimal. We thank the reviewer for asking these clarifying questions. As we approach the end of the discussion period, we hope we managed to address reviewers' concerns and questions.

Reviewer 69ED2023-08-20

I thank the authors for their response. I will keep my score. For the final version of the paper, I also suggest including a discussion paragraph that compares the exact optimal error rate provided here with the guarantees of the previous work about order optimal schemes. The authors mention that in practice the constant factor difference makes a difference, and have demonstrated this through experiments. However, it would be interesting to see how much they differ theoretically.

Authorsrebuttal2023-08-21

Thank you for your response to our rebuttal.

We thank the reviewer for the suggestion. We will include the suggested paragraph in the final manuscript.

Authorsrebuttal2023-08-21

Thank you for your response to our rebuttal.

We thank the reviewer for their time reading our rebuttal.

Authorsrebuttal2023-08-21

Thank you for your response to our rebuttal.

We thank the reviewer for their time evaluating our manuscript and reading our rebuttal.

Program Chairsdecision2023-09-21

Decision

Accept (poster)

© 2026 NYSGPT2525 LLC