arXiv:2502.01649eess.AScs.LG2025-02被引 4

在边缘设备上用小模型实时屏蔽语音隐私,不降准确率。

Safeguarding Privacy in Edge Speech Understanding with Tiny Foundation Models

  • 用时间戳标记敏感词,本地动态掩码输入语音
  • 在64位树莓派上实现,内存<100MB,过滤83%敏感实体
  • 比现有方案快3.3倍、省17倍算力,适合资源受限场景

可靠的语音识别系统依赖云服务进行推理,但需确保不可信的云提供商无法推断语音中的敏感内容。传统净化方法需兼顾转录准确性。我们首次利用微型语音基础模型(FMs)的潜力,提出一种新用途:在资源受限设备上增强语音隐私保护。引入SpeechShield,一个边缘/云协同的隐私保护语音推理引擎,可在不牺牲转录准确性的前提下过滤敏感实体。其核心是基于时间戳的本地掩码机制,结合令牌到实体预测模型,智能遮蔽敏感部分。掩码后的输入发送至可信云或本地枢纽生成输出。通过置信度评分融合本地与云端预测结果,提升恢复精度。我们在64位树莓派4B上实现SpeechShield,实验表明其内存低于100MB,达到当前最优(SOTA)语音转录性能,可本地直接过滤约83%的私密实体。相比已有隐私保护框架,内存缩小16倍,速度提升3.3倍,计算效率提高17倍,且字错误率(WER)相对降低38.8%-77.5%。

原文摘要 · Abstract (English)

Robust speech recognition systems rely on cloud service providers for inference. It needs to ensure that an untrustworthy provider cannot deduce the sensitive content in speech. Sanitization can be done on speech content keeping in mind that it has to avoid compromising transcription accuracy. Realizing the under utilized capabilities of tiny speech foundation models (FMs), for the first time, we propose a novel use: enhancing speech privacy on resource-constrained devices. We introduce SpeechShield, an edge/cloud privacy preserving speech inference engine that can filter sensitive entities without compromising transcript accuracy. We utilize a timestamp based on-device masking approach that utilizes a token to entity prediction model to filter sensitive entities. Our choice of mask strategically conceals parts of the input and hides sensitive data. The masked input is sent to a trusted cloud service or to a local hub to generate the masked output. The effectiveness of SpeechShield hinges on how well the entity time segments are masked. Our recovery is a confidence score based approach that chooses the best prediction between cloud and on-device model. We implement SpeechShield on a 64 bit Raspberry Pi 4B. Experiments show that our solution leads to robust speech recognition without forsaking privacy. SpeechShield with < 100 MB memory, achieves state-of-the-art (SOTA) speech transcription performance while filtering about 83% of private entities directly on-device. SpeechShield is 16x smaller in memory, 3.3x faster and 17x more compute efficient than prior privacy preserving speech frameworks and has a relative reduction in word error rate (WER) by 38.8-77.5% when compared to existing offline transcription services.

语音隐私边缘计算小型模型数据安全

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。