PAT: Privacy-Preserving Adversarial Transfer for Accurate, Robust and Privacy-Preserving EEG Decoding
- 1Hubei Key Laboratory of Brain-inspired Intelligent Systems, School of Artificial Intelligence and Automation, Huazhong University of Science and Technology, Wuhan, 430074, China
- 2Shenzhen Huazhong University of Science and Technology Research Institute, Shenzhen, 518000, China
- 3Zhongguancun Academy, Beijing, 100094, China
Abstract
An electroencephalogram (EEG) based brain-computer interface (BCI) enables direct communication between the brain and external devices. However, EEG-based BCIs face at least three major challenges in real-world applications: inaccurate decoding, poor robustness of EEG decoding models, and challenges in user privacy protection. While previous studies have addressed one or two of these issues, simultaneously accommodating all three challenges remains challenging and unexplored. This paper demonstrates for the first time that achieving simultaneously accurate, robust and privacy-preserving EEG decoding is feasible by proposing Privacy-preserving Adversarial Transfer (PAT). PAT integrates adversarial training into privacy-preserving transfer learning, achieving simultaneously accurate decoding, adversarial robustness, and privacy protection of EEG-based BCIs. Experiments on five public EEG datasets and three privacy-preserving scenarios (centralized source-free transfer, federated source-free transfer, and transfer with privacy-preserved source data) demonstrated that our proposed approach outperformed over 10 classic and state-of-the-art approaches in both accuracy and robustness. PAT even outperformed state-of-the-art transfer learning approaches that do not consider privacy protection. This is the first time three major challenges in EEG-based BCIs can be handled simultaneously. We hope to promote future research on more accurate, robust, and privacy-preserving EEG decoding.
Related
- Federated Spiking GANs with Rényi Differential Privacy for privacy-preserving synthetic EEG generation in brain-computer interfaces.
- Two Kinds of Mental Privacy: What Speech Decoding Does and Does Not Threaten.
- FedEdgeR: federated and privacy-preserving edgeR for differential gene expression analysis
- Agricultural visual recognition: a novel privacy-preserving framework based on 4D chaos and Mamba networks
- MediNet: simplifying federated and privacy-preserving AI deployment in healthcare
BibTeX
@article{chen2026privacypreserving,
title = {{PAT: Privacy-Preserving Adversarial Transfer for Accurate, Robust and Privacy-Preserving EEG Decoding}},
author = {Xiaoqing Chen and Tianwang Jia and Dongrui Wu and Dongrui Wu},
journal = {Fundamental Research},
year = {2026},
month = jun,
doi = {10.1016/j.fmre.2026.04.034},
url = {https://doi.org/10.1016/j.fmre.2026.04.034},
note = {CC BY},
}
RIS
TY - JOUR
TI - PAT: Privacy-Preserving Adversarial Transfer for Accurate, Robust and Privacy-Preserving EEG Decoding
AU - Xiaoqing Chen
AU - Tianwang Jia
AU - Dongrui Wu
AU - Dongrui Wu
PY - 2026
DA - 2026/06/01
JO - Fundamental Research
DO - 10.1016/j.fmre.2026.04.034
UR - https://doi.org/10.1016/j.fmre.2026.04.034
AB - An electroencephalogram (EEG) based brain-computer interface (BCI) enables direct communication between the brain and external devices. However, EEG-based BCIs face at least three major challenges in real-world applications: inaccurate decoding, poor robustness of EEG decoding models, and challenges in user privacy protection. While previous studies have addressed one or two of these issues, simultaneously accommodating all three challenges remains challenging and unexplored. This paper demonstrates for the first time that achieving simultaneously accurate, robust and privacy-preserving EEG decoding is feasible by proposing Privacy-preserving Adversarial Transfer (PAT). PAT integrates adversarial training into privacy-preserving transfer learning, achieving simultaneously accurate decoding, adversarial robustness, and privacy protection of EEG-based BCIs. Experiments on five public EEG datasets and three privacy-preserving scenarios (centralized source-free transfer, federated source-free transfer, and transfer with privacy-preserved source data) demonstrated that our proposed approach outperformed over 10 classic and state-of-the-art approaches in both accuracy and robustness. PAT even outperformed state-of-the-art transfer learning approaches that do not consider privacy protection. This is the first time three major challenges in EEG-based BCIs can be handled simultaneously. We hope to promote future research on more accurate, robust, and privacy-preserving EEG decoding.
SN - 2096-9457
SN - 2667-3258
ER -