Privacy Amplification for Federated Learning via User Sampling and
  Wireless Aggregation
  In this paper, we study the problem of federated learning over a wireless
channel with user sampling, modeled by a Gaussian multiple access channel,
subject to central and local differential privacy (DP/LDP) constraints. It has
been shown that the superposition nature of the wireless channel provides a
dual benefit of bandwidth efficient gradient aggregation, in conjunction with
strong DP guarantees for the users. Specifically, the central DP privacy
leakage has been shown to scale as $\mathcal{O}(1/K^{1/2})$, where $K$ is the
number of users. It has also been shown that user sampling coupled with
orthogonal transmission can enhance the central DP privacy leakage with the
same scaling behavior. In this work, we show that, by join incorporating both
wireless aggregation and user sampling, one can obtain even stronger privacy
guarantees. We propose a private wireless gradient aggregation scheme, which
relies on independently randomized participation decisions by each user. The
central DP leakage of our proposed scheme scales as $\mathcal{O}(1/K^{3/4})$.
In addition, we show that LDP is also boosted by user sampling. We also present
analysis for the convergence rate of the proposed scheme and study the
tradeoffs between wireless resources, convergence, and privacy theoretically
and empirically for two scenarios when the number of sampled participants are
$(a)$ known, or $(b)$ unknown at the parameter server.
