I. Introduction
With the rapid development of autonomous driving technology, a large amount of data are generated by various sensors on vehicles, such as cameras, radar, lidar, as well as proximity and temperature sensors. For example, a self-driving car is expected to generate about 1 GB of data per second [1]. Vehicles need powerful computing capability to process and analyze the data to support the modeling training of the vehicular artificial intelligence (AI) applications, such as simultaneous localization and mapping (SLAM), augmented reality (AR) navigation, object tracking, and high-definition (HD) map generation [2]. However, the computing capability of vehicles is limited. In this situation, vehicle edge computing (VEC) becomes a promising technology to facilitate these applications, where a base station (BS) connected with an edge server can collect and utilize the vehicles’ data for the model training [3]. However, the raw data generated by a vehicle often contains personal information, thus there may be a risk of data leakage in data privacy in VEC [4].