arXiv:2504.14301cs.CVcs.AI2025-04CVPR被引 5

用惩罚机制让图像匿名化不丢动作识别性能

Balancing Privacy and Action Performance: A Penalty-Driven Approach to Image Anonymization

  • 通过实用分支的特征惩罚优化匿名化器
  • 隐私泄露几乎不变,动作识别性能提升
  • 适合需合规隐私保护的视频监控场景

视频监控在目标检测、跟踪、行为识别和异常检测中的快速发展,深刻影响日常生活,同时也引发隐私担忧。在多数计算机视觉模型中,难以平衡视觉隐私与动作识别性能。能否在不牺牲性能的前提下保护隐私?这是一大挑战,因为微小的隐私增强常导致性能显著下降。为此,我们提出一种隐私保护的图像匿名化技术,利用实用分支的惩罚信号优化匿名化器,在最小化隐私泄露的同时提升动作识别性能。该方法有效缓解了隐私泄露与高动作性能之间的权衡。所提方法主要符合欧盟《人工智能法案》和GDPR监管要求,保障个人可识别信息的同时维持识别性能。据我们所知,这是首个仅控制动作特征的基于特征的惩罚方案,使私有属性可自由匿名化。大量实验验证了该方法的有效性:从实用分支施加惩罚后,动作性能提升,且不同惩罚设置下隐私泄露基本保持一致。

原文摘要 · Abstract (English)

The rapid development of video surveillance systems for object detection, tracking, activity recognition, and anomaly detection has revolutionized our day-to-day lives while setting alarms for privacy concerns. It isn't easy to strike a balance between visual privacy and action recognition performance in most computer vision models. Is it possible to safeguard privacy without sacrificing performance? It poses a formidable challenge, as even minor privacy enhancements can lead to substantial performance degradation. To address this challenge, we propose a privacy-preserving image anonymization technique that optimizes the anonymizer using penalties from the utility branch, ensuring improved action recognition performance while minimally affecting privacy leakage. This approach addresses the trade-off between minimizing privacy leakage and maintaining high action performance. The proposed approach is primarily designed to align with the regulatory standards of the EU AI Act and GDPR, ensuring the protection of personally identifiable information while maintaining action performance. To the best of our knowledge, we are the first to introduce a feature-based penalty scheme that exclusively controls the action features, allowing freedom to anonymize private attributes. Extensive experiments were conducted to validate the effectiveness of the proposed method. The results demonstrate that applying a penalty to anonymizer from utility branch enhances action performance while maintaining nearly consistent privacy leakage across different penalty settings.

隐私保护动作识别匿名化合规

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。