 Research
 Open Access
 Published:
A novel privacypreserving speech recognition framework using bidirectional LSTM
Journal of Cloud Computing volume 9, Article number: 36 (2020)
Abstract
Utilizing speech as the transmission medium in Internet of things (IoTs) is an effective way to reduce latency while improving the efficiency of humanmachine interaction. In the field of speech recognition, Recurrent Neural Network (RNN) has significant advantages to achieve accuracy improvement on speech recognition. However, some of RNNbased intelligence speech recognition applications are insufficient in the privacypreserving of speech data, and others with privacypreserving are timeconsuming, especially about model training and speech recognition. Therefore, in this paper we propose a novel Privacypreserving Speech Recognition framework using Bidirectional Long shortterm memory neural network, namely PSRBL. On the one hand, PSRBL designs new functions to construct security activation functions by combing with an additive secret sharing protocol, namely a secure piecewiselinear Sigmoid and a secure piecewiselinear Tanh respectively, to achieve privacypreserving of speech data during speech recognition process running on edge servers. On the other hand, in order to reduce the time spent on both the training and the recognition of the speech model while keeping high accuracy during speech recognition process, PSRBL first utilizes secure activation functions to refit original activation functions in the bidirectional Long ShortTerm Memory neural network (LSTM), and then makes full use of the left and the right context information of speech data by employing bidirectional LSTM. Experiments conducted on the speech dataset TIMIT show that our framework PSRBL performs well. Specifically compared with the stateoftheart ones, PSRBL significantly reduces the time consumption on both the training and the recognition of the speech model under the premise that PSRBL and the comparisons are consistent in the privacypreserving of speech data.
Introduction
Utilizing speech as the transmission medium in Internet of things (IoTs) is an effective way to reduce latency while improving the efficiency of humanmachine interactions. For example, the Siri from the Apple and the Cortana from the Microsoft obtain instructions through speech recognition and return the most matched results to users, which greatly improves users’ work effectiveness. Due to the advantages of speech, many applications of “IoTs + speech” in our daily life have been promoted and developed, such as smart home [1] and selfdriving vehicles [2]. Studies have demonstrated that speech recognition applications based on Recurrent Neural Network (RNN) perform well in terms of improving accuracy of speech recognition [3]. However, these RNNbased speech recognition applications deployed on a centralized cloud challenge the transmission performance of devices used in IoTs and the computing performance of the centralized cloud, since they are computationintensive and require high capacity memory. The global edge computing market size is anticipated to reach USD 43.4 billion by 2027, exhibiting a CAGR of 37.4 % over the forecast period, according to a new report by Grand View Research, Inc^{Footnote 1}. In addition, the data traffic of these explosively increasing terminal devices is transmitted to the cloud for processing, which will eventually exceed the cloud’s computing and storage capabilities. Thus, most of RNNbased speech recognition applications are deployed on edge servers to alleviate challenges derived from computingintensiveness and insufficient storage capabilities of the clouds [4, 5]. However, in the era of big data with the explosive growth of data volume, deploying a speech recognition application on edge servers is not an effective solution since edge computing suffers from capacity limitations. Hence, the edgecloud computing paradigm offers a tradeoff between speech recognition applications’ requirements for computing resources and low latency, and improves the usage efficiency of the IoT devices [6].
It is no doubt that there is a lack of security technologies and privacy protection mechanisms for smart speech facilitated by the edgecloud computing paradigm [7, 8]. That is, the speech data involving private information could be maliciously collected, transmitted and analyzed during the process of speech recognition, which enables criminals to grasp users’ daily behaviors and health statuses, etc. [9]. Secret Sharing [10], homomorphic encryption [11] and differential privacy [12] are three conventional algorithms for data privacypreserving. The homomorphic encryptionbased privacypreserving methods are computationintensive and require high capacity memory, which reduces their commercial practicability. In contrast, for privacypreserving methods based on differential privacy, the added noise usually results in poor availability, which increases the occurrence probability of errors during the process of speech recognition. Secure MultiParty Computing (SMC) [13] is an excellent method that could be well integrated with edge servers to improve the performance of privacypreserving while ensuring high data availability. In addition, for speech recognition, Long ShortTerm Memory neural network (LSTM) is a wellknown method with high accuracy and practicability. Therefore, Ma et al. [14] proposed an outsourced privacypreserving speech recognition framework (namely OPSR) based on advantages of SMC and LSTM.
Although OPSR greatly improves the commercial practicability of speech data and the accuracy of speech recognition while realizing the privacypreserving of speech data, it still can be updated in terms of semantic dependence and time consumption. On the one hand, since studies [15, 16] showed that the accuracy of speech recognition could be improved by extracting the bidirectional semantic dependence of speech, the right context of speech sequence data should not be neglected. For example, due to the variety of noises coming from natural environments, the recording devices may lose some information of speech data, so that the thoughts of speakers cannot be fully expressed. Utilizing both the left and the right context information of the missing speech data is a significant way to infer the missing speech information, so as to achieve the accuracy improvement of speech data prediction. On the other hand, the activation functions used in OPSR require multiple iterations during the process of speech recognition. Intuitively, more iterations consume more time. Hence, it is necessary to seek another suitable ways instead of multiple iterations.
Therefore, this paper designs a novel Privacypreserving Speech Recognition framework using the Bidirectional Long shortterm memory neural network, namely PSRBL. Based on SMC and Bidirectional LSTM (BiLSTM in short), PSRBL first divides the original speech data into two encrypted parts randomly by combining with an additive secret sharing protocol. Then it utilizes new piecewiselinear functions proposed in this paper to reconstruct the original activation functions in BiLSTM. After that, PSRBL inputs the encrypted speech data into BiLSTM. Finally, PSRBL achieves the privacypreserving of speech data based on collaborations between two independent edge servers during the training and the recognition of the speech recognition model. The experimental results demonstrate that our PSRBL significantly reduces the time consumption in terms of the training and the recognition of models, and also improves the response speed while preserving the privacy information of the speech data on the edge servers. The main contributions of this paper are summarized as follows.

(1)
We propose a novel speech recognition framework with privacypreserving based on SMC and BiLSTM, namely PSRBL. The framework PSRBL can achieve the privacypreserving of speech data by running SMC method on two independent edge servers.

(2)
We design new piecewiselinear functions to refit the original activation functions (i.e., Sigmoid and Tanh) in BiLSTM. Compared with the stateoftheart OPSR framework, our PSRBL greatly reduces the time consumption in terms of model training and speech recognition while ensuring the consistency of training error.
The remainder of this paper is organized as follows. “PSRBL framework” presents our PSRBL framework. “Experiments” reports our experimental results. In “Related work”, we overview recent work focusing on edgecloud computing and speech recognition with privacypreserving, and then we conclude the paper in “Conclusion” sections.
PSRBL framework
In this section, we will first present the architecture of PSRBL. Then the secure forward propagation and the secure backward propagation of BiLSTM (the core of PSRBL) will be introduced respectively. Finally, we will analyze the correctness and the security capability of BiLSTM.
The architecture of PSRBL
In this paper, we achieve improvement and optimization based on OPSR and propose the framework PSRBL. The architecture of PSRBL is shown in Fig. 1 (which will be described in the next paragraphs). As can be seen in Fig. 1, our PSRBL consists of seven participants, which are endusers, the smart audio devices that endusers use, two edge servers, the trusted third party, the smart IoT devices and the service providers.
Here, U denotes an enduser. AD denotes the smart audio device that an enduser uses, and it can record and preprocess the voice data of the enduser as well as receive the results of speech recognition. Besides, AD randomly divides the feature vector of the preprocessed data into two participants, denoted as A_{1} and A_{2} respectively, and sends them to the two edge servers, which are denoted as S_{1} and S_{2} respectively. Note that for each edge server there is a training system deployed. S_{1} and S_{2} employ BiLSTM for speech recognition training and work together to obtain the complete output, denoted as f. T denotes the trusted third party who supports the collaborative computing of S_{1} and S_{2}. I denotes the smart IoT devices receiving the original output results (which are denoted as f_{1} and f_{2} respectively) from BiLSTM. I performs the summation verification on f_{1} and f_{2} to get f, so as to obtain the speech recognition results that endusers require. SP denotes the service providers.

1)
Compared with OPSR, we use BiLSTM instead of LSTM to perform the training of speech recognition systems (as shown in black in Fig. 1). BiLSTM consists of two unidirectional LSTMs (i.e., the forward LSTM with a forward sequence \({\overrightarrow {A}}\)=(x_{0},x_{1},…, x_{t},…) and the backward LSTM with a backward sequence \({\overleftarrow {A}}\)=(…, x_{t},x_{t−1},…, x_{0}) that can be trained in parallel. As we have stated above, utilizing both the left and the right context information of the missed speech data could achieve the accuracy improvement of speech data prediction. Therefore, by combining the context information of speech data, BiLSTM can perform effective prediction. The secure forward propagation and the secure back propagation of BiLSTM will be respectively introduced in “Secure forward propagation” and “Secure backward propagation” sections in detail.

2)
New piecewiselinear functions, which are respectively named PSigmoid and PTanh, are proposed to refit the activation functions with multiple iterations (i.e., Sigmoid and Tanh) for reducing the time consumption. Compared with Maclaurin polynomials, our piecewiselinear functions can greatly reduce the time consumption. The PSigmoid and PTanh are defined as (1) and (2) respectively. The results of refitting Sigmoid by respectively using the piecewiselinear function PSigmoid and the activation function MNSigmoid used in OPSR are shown in Fig. 2a, and the results of refitting Tanh by respectively using the piecewiselinear function PTanh and the activation function MNTanh used in OPSR are shown in Fig. 2b.
$$\begin{array}{@{}rcl@{}} {\begin{aligned} PSigmoid(x)=\left\{\begin{array}{rcl} 0 & & {x \leq 5}\\ 0.015078x+0.085083 & & {5 < x \leq 3.5}\\ 0.0599266667x+0.239053333 & & {3.5 < x \leq 2}\\ 0.164857143x+0.448914286 & & {2 < x \leq 0.6}\\ 0.25x+0.5 & & {0.6 < x \leq 0.6}\\ 0.164857143x+0.551085714 & & {0.6 < x \leq 2}\\ 0.0599266667x+0.7609466667 & & {2 < x \leq 3.5}\\ 0.015078x+0.91791 & & {3.5 < x \leq 5}\\ 1 & & {x > 5}\\ \end{array}\right. \end{aligned}} \end{array} $$(1)$$\begin{array}{@{}rcl@{}} {}PTanh(x)=\left\{\begin{array}{rcl} 0 & & {x \leq 3}\\ 0.0311x0.9018 & & {3 < x \leq 2}\\ 0.1178x0.7284 & & {2 < x \leq 1.5}\\ 0.2708x0.4971 & & {1.5 < x \leq 1}\\ 0.56975x+0.19815 & & {1 < x \leq 0.6}\\ 0.9x & & {0.6 < x \leq 0.6}\\ 0.56975x+0.19815 & & {0.6 < x \leq 1}\\ 0.2708x+0.4971 & & {1 < x \leq 1.5}\\ 0.1178x+0.7284 & & {1.5 < x \leq 2}\\ 0.0311x+0.9018 & & {2 < x \leq 3}\\ 1 & & {x > 3}\\ \end{array}\right. \end{array} $$(2)
After that, SP transmits the parameters of piecewiselinear functions and a thirdtuple (a, b, M) to T (as shown in purple in Fig. 1), where a and b respectively denote the variable coefficient and the constant term of piecewiselinear functions, and M denotes the piecewise intervals. T first sums the middle values transmitted from both S_{1} and S_{2} to obtain the interval M, and then randomly divides (a, b) into (a^{′},b^{′}) and (a^{′′},b^{′′}). Finally, (a^{′},b^{′}) and (a^{′′},b^{′′}) are respectively sent back to S_{1} and S_{2} to support their security twoparty calculations (as shown in blue in Fig. 1).
From Fig. 2a, we can see that the curve PSigmoid excellently refits the curve Sigmoid, whereas the curve MNSigmoid only performs well in an interval [2, 2]. Figure 2b shows that the curve PTanh excellently refits the curve Tanh, whereas the curve MNTanh only performs well in an interval [1, 1].
Secure forward propagation
For each edge server there is a BiLSTM deployed, and each BiLSTM contains a single Forward layer LSTM (FLSTM in short) and a single Backward layer LSTM (BLSTM in short). Each single FLSTM (BLSTM) handles historical information by deploying a nonlinear function and a large number of linear functions and includes a single forget gate, a single input gate and a single output gate. Given a speech sequence data A=(x_{0},x_{1}, …, x_{t},…), S_{1} and S_{2} perform the privacypreserving calculations of the forget gate, the input gate and the output gate by employing a security addition protocol and a secure multiplication protocol. The symbols “ →” and “ ←” respectively indicate the calculation processes of FLSTM and BLSTM. The superscript symbols “ ′” and “ ′′” indicate the calculation processes of neural network on S_{1} and S_{2} respectively. The symbols as well as the corresponding interpretations used in the paper are shown in Table 1. The secure forward propagation of BiLSTM is shown in Fig. 3.
We combine piecewiselinear functions PSigmoid(x) and PTanh(x) with a security addition protocol and a secure multiplication protocol to construct new secure piecewiselinear functions SPSigmoid(x) and SPTanh(x) respectively, which are treated as activation functions of gates. Since the construction steps of SPSigmoid(x) and SPTanh(x) are similar, we only take SPSigmoid(x) as an example, which is defined as follows.
where a^{′} and b^{′} respectively denote the coefficient and the constant term of PSigmoid(x) running on S_{1}; a^{′′} and b^{′′} respectively denote the coefficient and the constant term of PSigmoid(x) running on S_{2}.
Forget gate. The forget gate SPSigmoid(x) treats h_{t−1} (the output vector of the previous unit) and x_{t} (the input vector of the current unit) as input values. For each item in c_{t−1} (the memory vector of the previous unit), SPSigmoid(x) generates a value within [0, 1] to handle the forgetting degree of the previous unit. The relevant calculating processes are shown as follows.
FLSTM:
BLSTM:
Input gate. The input gate performs three steps. Step 1), it utilizes SPSigmoid(x) to calculate i_{t} (which is the filtered input vector of current unit). The relevant calculating processes are defined as follows.
FLSTM:
BLSTM:
Step 2), the input gate uses SPTanh(x) to calculate \(\tilde {c}_{t}\) (which is the candidate unit state vector of current unit) for handling how much new information required to be added. The relevant calculating processes are listed as follows.
FLSTM:
BLSTM:
and Step 3), by combining with a secure addition function and a secure multiplication function, the input gate employs \({\tilde {c}}_{t1}, i_{t}\) and \({\tilde {c}}_{t}\) to update the unit state, which are calculated as follows.
FLSTM:
BLSTM:
Output gate. The input values of the output gate are the calculated results coming from the input gate and the forget gate, which means the output of BiLSTM is influenced by both longterm memory and the current input value. The output gate first utilizes W_{o} (the output weight matrix) and B_{o} (the output bias term) to calculate o_{t} (the current output vector of the output gate) by using following equations.
FLSTM:
BLSTM:
Then by combining with SPSigmoid(x) and SPTanh(x),h_{t} (the output vector of current unit) of BiLSTM is calculated according to o_{t} and c_{t}. The relevant calculating processes are defined by following equations.
FLSTM:
BLSTM:
In the entire process of secure forward propagation of BiLSTM, \(\left [\overrightarrow {h_{t}}, \overleftarrow {h_{t}}\right ]\) is the input vector of the output layer at time t, where \(\overrightarrow {h_{t}}\)=\(\overrightarrow {h^{\prime }_{t}}\) + \(\overrightarrow {h^{\prime \prime }_{t}}\) and \(\overleftarrow {h_{t}}\)=\(\overleftarrow {h^{\prime }_{t}}\) + \(\overleftarrow {h^{\prime \prime }_{t}}\). Note that \(\overrightarrow {h_{t}}\) and \(\overleftarrow {h_{t}}\) are calculated by using FLSTM and BLSTM respectively.
Secure backward propagation
The basis of the secure backward propagation of BiLSTM is Back Propagation Trough Time (BPTT) algorithm, and there is no complex derivative calculation in the secure backward propagation of BiLSTM in this paper, since the original activation functions Sigmoid(x) and Tanh(x) are refitted by SPSigmoid(x) and SPTanh(x) respectively, where SPSigmoid^{′}(x)=a and SPTanh^{′}(x)=a. That is, the training process of the secure backward propagation of BiLSTM can be performed by directly utilizing the secure addition protocol and the secure multiplication protocol, which is similar to that of its secure forward propagation.
Based on the trusted third party T, the secure BTPP is performed by utilizing the results from security forward propagation to obtain the error of the loss function. After that, sending the error back to edge servers to update the corresponding weight matrix and bias items. BiLSTM iteratively runs the process until the error converges. Since the calculation process of back propagation in BLSTM is the same as those of FLSTM, we only take FLSTM as an example to introduce details below.
FLSTM:
where \(\overrightarrow {\delta _{t1}}\) denotes the total error vector at time t1, \(\overrightarrow {\delta _{(o,t)}},\overrightarrow {\delta _{(f,t)}}, \overrightarrow {\delta _{(i,t)}} and \overrightarrow {\delta _{(\tilde {c},t)}}\) are partial error vectors, which are respectively calculated as follows.
Initializing the total error vector at time t to 1, i.e., \(\overrightarrow {\delta _{t}}\)=1, and the total error vector before time t can be obtained by (24). Given the partial error vectors at each time, \(\overrightarrow {h_{t1}}, \overrightarrow {W_{k}}\) and \(\overrightarrow {B_{k}}\). Meanwhile, by using the symbol ∇ to denote the gradient, we can obtain an equation:
In addition, the corresponding derivations are shown as follows.
Using α to denote the learning rate of BiLSTM, and supposing that α is public and available, the weight matrix and the bias term can be updated by using the gradient values, which are calculated as follows.
Analyses for correctness and security analysis
Correctness. As shown in Fig. 2, the piecewiselinear functions PSigmoid(x) and PTanh(x) perform well. Theoretically, PSigmoid(x) and PTanh(x) can infinitely approach the original activation functions Sigmoid(x) and Tanh(x). In addition, the foundations of secure piecewiselinear functions SPSigmoid(x) and SPTanh(x) are the secure addition protocol and the secure multiplication protocol of the addition secret sharing protocol whose correctness has been proved in [14].
Security Analysis. In the processes of forward propagation and back propagation, on the one hand, all input vectors of secure piecewiselinear functions SPSigmoid(x) and SPTanh(x) are the calculated results of the secure addition protocol and the secure multiplication protocol. On the other hand, all output vectors of the forget gate, the input gate and the output gate are calculated by SPSigmoid(x) and SPTanh(x). Since the security of the secure addition protocol and the secure multiplication protocol has been demonstrated in [14], the processes of forward propagation and back propagation are secure.
Experiments
In this section, we conduct multiple experiments to evaluate the performance of our PSRBL. We focus in answering the following two research questions.

(1)
Question 1. Can the proposed piecewiselinear activation functions achieve the accuracy improvement of our PSRBL?

(2)
Question 2. Compared with existing stateoftheart peers, does our PSRBL perform better?
Experimental dataset and environment
We utilize the stateoftheart framework OPSR as comparison. OPSR is implemented in Python3 and Numpy in [14]. The adopted speech dataset is a part of TIMIT corpus, which has 123 features coming from the Fourier transformbased filter library [17]. To make fair comparisons, the performance of our PSRBL is also evaluated on the same dataset. Given a data length l=64, 2000 processed speech sequence data with 123 features applied on a neural network with 80 neurons, and the time step is set to 8. Therefore, the size of the weight matrix W_{k} is 203 ×80, where k\(\in \left \{f, i, \tilde {c}, o\right \}\), and the output matrix and the offset terms are 8 ×80 and 1 ×80 respectively. In addition, PSRBL is also implemented by Python3 and Numpy, and follows the same experimental parameter settings that OPSR used. Note that OPSR uses the McLaughlin polynomial and the Newton iteration method, where the number of iterations is set to 10. However, our PSRBL does not need iterations, since its activation functions are refitted by the piecewiselinear functions. In our experiments, edge servers have the same configuration, which are Inter(R)Core(TM) i57500 CPU @3.40GHz and 8.00GB of memory.
Performance of the piecewiselinear activation functions (Question 1)
Since the piecewiselinear activation functions achieve an accuracy improvement of framework PSRBL, we first conduct multiple experiments to evaluate the performance of piecewiselinear activation functions with different numbers.
The experimental results of Sigmoid piecewiselinear fitting activation function PNSigmoid are shown in Table 2. With the increment of the piecewise number, the error values of the forward propagation of both original and secure LSTMs continuously reduce. When the piecewise number is 8, the error value reached 10^{−14}, which can be ignored. That is, as the piecewise number increases continuously, the change of the error value can be ignored but the time consumption significantly increases. Therefore, the piecewise number of fitting Sigmoid activation function is set to 8.
The results of Tanh piecewiselinear fitting activation function PNTanh are shown in Table 3. When the piecewise number is 11, the error value reaches 10^{−14}, which can be ignored. After that, as the piecewise number continuously increases, the time consumption significantly increases, so as to the piecewise number of fitting Tanh activation function is set to 11.
Performance comparisons (Question 2)
The experimental comparisons are shown in Figs. 4 and 5. Note that PSRBLF and PSRBLB in the figures respectively correspond to FLSTM and BLSTM of BiLSTM (the key component of our PSRBL).
From Fig. 4, we can see that with the increment of the number of samples, 1) the calculation errors of the forward propagation of PSRBLF, PSRBLB and OPSR are all as low as 10^{−14} (as shown in Fig. 4a); and 2) the calculation errors of the backward propagation of PSRBLF, PSRBLB and OPSR are all as low as 10^{−14} too (as shown in Fig. 4b). Therefore, we can conclude that the frameworks PSRBL and OPSR have the same performance in the training process of the neural network with privacypreserving.
As shown in Fig. 5, with the increment of the number of samples, the time consumptions of PSRBLF, PSRBLB and OPSR increase too. However, both PSRBLF and PSRBLB are much more efficient than OPSR. In the case where the number of samples is less than 100, the time consumptions of both PSRBLF and PSRBLB is half of that of OPSR (as shown in Fig. 5a). In the case where the number of samples is between 100 and 1000, OPSR takes one and a half times as long as both PSRBLF and PSRBLB do (as shown in Fig. 5b). In the case where the number of samples is between 1000 and 2000, OPSR still takes more time consumption as long as both PSRBLF and PSRBLB do (as shown in Fig. 5c).
To sum up, we can conclude that PSRBL significantly reduces the time of both the training and the recognition of the speech model. The reason is that the secure activation functions in PSRBL do not require iterations. The time spent on a single iteration of a single secure activation function in OPSR, denoted as t_{s}, is the sum of the time of running onetime secure addition protocol and onetime secure multiplication protocol. In the experiments, the number of iterations that secure activation functions required in OPSR is 10, which means the total time spent on a single secure activation function is 10 t_{s}. PSRBL uses piecewiselinear functions instead of secure activation functions to avoid iterations. Supposes that T needs t_{p} to construct the piecewise intervals, the total time spent on a single secure activation function is t_{s} + t_{p}, which means the time consumption of PSRBL depends on t_{p}.
Table 4 shows the time consumptions (including initialization time and calculation time of a single sample) of forward and backward calculations. The initialization time refers to 1) the initialization of weight matrix and calculation vectors for each bias term, and 2) the initialization of three gates of LSTM. It can be seen that the initialization time of PSRBL is roughly the same as that of OPSR. However, for the time consumption of forward calculation, OPSR takes 4.5 times as long as PSRBL does, and for the time consumption of backward calculation, OPSR takes 2.3 times as long as PSRBL does.
Table 5 shows the time consumptions of three gates of forward and backward calculations. It can be seen that the initialization time of PSRBL is roughly the same as that of OPSR. For the time consumptions of the forget gate, the input gate and the output gate, OPSR respectively takes 3, 4 and 6 times as long as PSRBL does.
As shown in Table 6, the privacypreserving homomorphic encryptionbased scheme needs to encrypt the data at first, which extends the data size, so as to greatly increase the overhead of communication storage during the training process of BiLSTM and applications of intelligent voice.
Table 7 shows that the framework based on additive secret sharing performs better than the homomorphic encryptionbased framework. In order to process one frame of audio, the homomorphic encryptionbased privacy protection Gaussian mixture model (GMM) scheme [11] requires 616.759 ms, the time consumption is almost 6 times that of PSRBL, and the overhead of communication storage is more than 40 times that of PSRBL. In addition, compared with Hidden Markov Model (HMM) [10] and OPSR based on the addition secret sharing, BiLSTMbased models achieve higher accuracy. Compared with OPSR based on the addition secret sharing, PSRBL can significantly reduce the time consumption, which means it can not only save the training time for the entire model, but also improve the response time during speech recognition.
Related work
Edge computing is a popular computing paradigm with the aim to minimize the delay between endusers and the cloud, and many applications in our daily life have been promoted and developed, such as QoS prediction [18, 19]. However, it is well known that edge computing suffers from capacity limitations. Thus, the edgecloud computing paradigm is proposed to balance computing resources and low latency. Speech recognition [3] is one of the most important applications.
In the early days, speech recognition research mainly used Hidden Markov Model (HMM) [20, 21]. Lee et al. [22] proposed a cooccurrence smoothing algorithm that enables accurate speech recognition on a minimal training dataset. Nevertheless, HMM neglects the longterm dependence relations between speech data. Lipton et al. [23] showed that Recurrent Neural Networks (RNN) could effectively solve the above problem. Differ from the sequential structure of Convolutional Neural Network (CNN) [24], RNN forms a complex recurrent chain structure through input layer, hidden layer and output layer. Gers et al. [25] improved the LSTM network structure by adding a forget gate and peepholes, since RNN becomes unreliable under complex application environments because of the longterm dependencies problem [26]. However, LSTM neglects the right context information of speech data, which results in loss of semantic information. Hence, Alex Graves et al. [27] proposed a bidirectional longterm and shortterm memory neural network. Unlike the way of training from left to right that used in LSTM, Alex Graves et al. made the use of the left and the right context information to train the speech recognition model. Bin et al. [28] proposed a video captioning framework based on bidirectional longterm memory and soft attention mechanisms to enhance the ability of recognizing persistent motion in the video.
In the development of speech recognition technology, most speech recognition systems are deployed on cloud and (or) edge servers, and meanwhile the speech data is stored and transmitted in cleartext. That is, speech data with private information can be maliciously collected and analyzed [9]. Therefore, it is a feasible solution to protect speech data by using encryption algorithms. CryptoNets [29] is a neural network that can be trained by ciphertext. Some studies use Homomorphic Encryption (HE) to protect data privacy, such as MiniONN [30]. For example, Zhang et al. used BGV to achieve the encryption of the private data [31]; Yilmaz et al. utilized a partially homomorphic cryptosystem as the element of the proposed privacypreserving solutions [32]. HEbased methods are timeconsuming and require high capacity memory. Differential privacy is another data privacypreserving method. However, it decreases the accuracy of speech recognition because of low data availability [11, 17]. SMC can effectively improve the availability of encrypted data by combining edge servers [4]. Huang et al. [33] proposed a SMCbased lightweight framework to protect data privacy. Ma et al. [14] proposed a privacypreserving speech recognition framework based on LSTM and SMC to achieve privacypreserving.
Conclusion
This paper proposes a novel Privacypreserving Speech Recognition framework using the Bidirectional Long shortterm memory neural network (PSRBL). PSRBL makes full use of the left and the right context of speech data to improve the accuracy of speech recognition, and employs piecewiselinear functions to refit the original activation functions for reducing training and recognition time. In addition, PSRBL achieves the privacypreserving of speech data during speech recognition based on SMC. The experimental results show that PSRBL outperforms the existing approaches.
Availability of data and materials
The data has been gathered from published research papers and articles that are mentioned in “Experiments” section.
Abbreviations
 RNN:

Recurrent Neural Network
 CNN:

Convolutional Neural Network
 BiLSTM:

Bidirectional Long ShortTerm Memory
 IoTs:

Internet of things
 SMC:

Secure MultiParty Computing
 LSTM:

Long ShortTerm Memory
 FLSTM:

forward layer LSTM
 BLSTM:

backward layer LSTM
 BPTT:

Back Propagation Trough Time
References
Alaa M, Zaidan A, Zaidan B, Talal M, Mat Kiah M (2017) A review of smart home applications based on internet of things. J Netw Comput Appl 97:48–65.
Paden B, Cap M, Yong S, Yershov D, Frazzoli E (2016) A survey of motion planning and control techniques for selfdriving urban vehicles. IEEE Trans Intell Veh 1(1):33–55.
Graves A, Mohamed A, Hinton G (2013) Speech recognition with deep recurrent neural networks In: Proceedings of IEEE International Conference on Acoustics, Speech and Signal Processing: 2631 May 2013.. IEEE, Vancouver.
Shi W, Cao J, Zhang Q, Li Y, Xu L (2016) Edge computing: Vision and challenges. IEEE Internet Things J 3(5):637–646.
Zhang Y, Cui G, Deng S, Chen F, Wang Y, He QEfficient query of quality correlation for service composition. IEEE Trans Serv Comput. https://doi.org/10.1109/TSC.2018.2830773 (in press).
Zhou J, Sun J, Cong P, Liu Z, Wei T, Zhou X, Hu S (2019) Securitycritical energyaware task scheduling for heterogeneous realtime mpsocs in iot. IEEE Trans Serv Comput. https://doi.org/10.1109/TSC.2019.2963301 (in press).
Gong W, Qi L, Xu Y (2018) Privacyaware multidimensional mobile service quality prediction and recommendation in distributed fog environment. Wirel Commun Mob Comput 2018:1–8.
Xu Y, Qi L, Dou W, Yu J (2017) Privacypreserving and scalable service recommendation based on simhash in a distributed cloud environment. Complexity 2017:1–9.
Hossain M (2016) Patient state recognition system for healthcare using speech and facial expressions. J Med Syst 40(12):272.
Smaragdis P, Shashanka M (2007) A framework for secure speech recognition. IEEE Trans Audio Speech Lang Process 15(4):1404–1413.
Pathak M, Raj B (2012) Privacypreserving speaker verification and identification using gaussian mixture models. IEEE Trans Audio Speech Lang Process 21(2):397–406.
Abadi M, Chu A, Goodfellow I, McMahan H, Mironov I, Talwar K, Zhang L (2016) Deep learning with differential privacy In: Proceedings of ACM SIGSAC Conference on Computer and Communications Security: 2428 October 2016.. ACM, Vienna.
Cramer R, Damgard I, Nielsen J (2015) Secure Multiparty Computation and Secret Sharing. Cambridge University Press, New York, NY, United States. https://doi.org/10.1017/CBO9781107337756.
Ma Z, Liu Y, Liu X, Ma J, Li F (2019) Privacypreserving outsourced speech recognition for smart iot devices. IEEE Internet Things J 6(5):8406–8420.
Graves A, Jaitly N, Mohamed A (2013) Hybrid speech recognition with deep bidirectional lstm In: Proceedings of IEEE Workshop on Automatic Speech Recognition and Understanding 8 12 Dec. 2013, 8–12.. IEEE, Olomouc.
Bin Y, Yang Y, Shen F, Xie N, Shen H, Li X (2018) Describing video with attentionbased bidirectional lstm. IEEE Trans Dependable Secure Comput 49(7):2631–2641.
Zhu T, Li G, Zhou W, Y P (2017) Differentially private data publishing and analysis: A survey. IEEE Trans Knowl Data Eng 29(8):1619–1638.
Zhang Y, Yin C, Wu Q, He Q, Zhu HLocationaware deep collaborative filtering for service recommendation. Trans Syst I Man Cybernet. https://doi.org/10.1109/TSMC.2019.2931723 (In press).
Zhang Y, Wang K, He Q, Chen F, Deng S, Zheng Z, Yang YCoveringbased web service quality prediction via neighborhoodaware matrix factorization. IEEE Trans Serv Comput. https://doi.org/10.1109/TSC.2019.2891517 (in press).
Juang B, Rabiner L (1991) Hidden markov models for speech recognition. Technometrics 33(3):251–272.
Schuller B, Rigoll G, Lang M (2003) Hidden markov modelbased speech emotion recognition In: Proceedings of IEEE International Conference on Acoustics, Speech, and Signal Processing: 610 April 2003.. IEEE, Hong Kong.
Lee K, Hon H (1989) Speakerindependent phone recognition using hidden markov models. IEEE Trans Acoust Speech Signal Process 37(11):1641–1648.
Lipton Z, Berkowitz J, Elkan C (2015) A critical review of recurrent neural networks for sequence learning. arXiv preprint arXiv:1506.00019.
Ren S, He K, Girshick R, Sun J (2017) Faster rcnn: towards realtime object detection with region proposal networks. IEEE Trans Pattern Anal Mach Intell 39(6):1137–1149.
Gers F, Schmidhuber J, Cummins F (2000) Learning to forget: Continual prediction with lstm. Neural Computation 12(10):2451–2471.
Kolen J, Kremer S (2001) A Field Guide to Dynamical Recurrent Networks. WileyIEEE Press, New York.
Graves A, Jaitly N (2014) Towards endtoend speech recognition with recurrent neural networks In: Proceedings of International Conference on Machine Learning: 36 Dec. 2014.. Journal of Machine Learning Research (JMLR), Detroit.
Bin Y, Yang Y, Shen F, Xie N, Shen H, Li X (2018) Describing video with attentionbased bidirectional lstm. IEEE Trans Cybern 49(7):2631–2641.
Dowlin N, GiladBachrach R, Laine K, Lauter K, Naehring M, Wernsing J (2016) Cryptonets: Applying neural networks to encrypted data with high throughput and accuracy In: Proceedings of International Conference on Machine Learning: 1924 June 2016.. Journal of Machine Learning Research (JMLR), New York City.
Liu J, Juuti M, Lu Y, Asokan N (2017) Oblivious neural network predictions via minionn transformations In: Proceedings of ACM SIGSAC Conference Computer and Communications Security: Oct. 30Nov. 03 2017.. ACM, Dallas.
Zhang Q, Yang L, Chen Z (2015) Privacy preserving deep computation model on cloud for big data feature learning. IEEE Trans Comput 65(5):1351–1362.
Yilmaz E, Ferhatosmanoglu H, Ayday E, Aksoy R (2019) Privacypreserving aggregate queries for optimal location selection. IEEE Trans Dependable Secure Comput 16(2):329–343.
Huang K, Liu X, Fu S, Guo D, Xu MA lightweight privacypreserving cnn feature extraction framework for mobile sensing. IEEE Trans Dependable Secure Comput. https://doi.org/10.1109/TDSC.2019.2913362 (In press).
Acknowledgements
The author is grateful to the Key Laboratory of Intelligent Computing and Signal Processing of Ministry of Education for funding this research.
Funding
This work is partially supported by the National Natural Science Foundation of China under Grant (U1936220,61702005), the National Key R&D Program of China under Grant (2019YFB1704101), the Natural Science Foundation of Anhui Province (1808085MF197, 2008085QF307), the Anhui Foundation for Science and Technology Major Project under Grant (18030901034), and the 2019 Anhui University Collaborative Innovation Project (GXXT2019013).
Author information
Authors and Affiliations
Contributions
Authors’ contributions
All authors take part in the discussion of the work described in this paper. All authors have worked equally when writing this paper. All author(s) read and approved the final manuscript.
Authors’ information
Qingren Wang is a lecturer at the School of Computer Science and Technology at the Anhui University of China. Chuankai Feng is a master candidate at the School of Computer Science and Technology at the Anhui University of China. Yan Xu is an associate professor at the School of Computer Science and Technology at the Anhui University of China. Hong Zhong is a professor at the School of Computer Science and Technology at the Anhui University of China. Victor S Sheng is an associate professor of the Department of Computer Science with the Texas Tech University.
Corresponding author
Ethics declarations
Competing interests
The authors declare no conflict of interest.
Additional information
Publisher’s Note
Springer Nature remains neutral with regard to jurisdictional claims in published maps and institutional affiliations.
Rights and permissions
Open Access This article is licensed under a Creative Commons Attribution 4.0 International License, which permits use, sharing, adaptation, distribution and reproduction in any medium or format, as long as you give appropriate credit to the original author(s) and the source, provide a link to the Creative Commons licence, and indicate if changes were made. The images or other third party material in this article are included in the article’s Creative Commons licence, unless indicated otherwise in a credit line to the material. If material is not included in the article’s Creative Commons licence and your intended use is not permitted by statutory regulation or exceeds the permitted use, you will need to obtain permission directly from the copyright holder. To view a copy of this licence, visit http://creativecommons.org/licenses/by/4.0/.
About this article
Cite this article
Wang, Q., Feng, C., Xu, Y. et al. A novel privacypreserving speech recognition framework using bidirectional LSTM. J Cloud Comp 9, 36 (2020). https://doi.org/10.1186/s13677020001867
Received:
Accepted:
Published:
DOI: https://doi.org/10.1186/s13677020001867
Keywords
 Bidirectional LSTM
 Privacypreserving
 Speech recognition
 Edgecloud computing
 Internet of things