用双汇聚线设计新隐私保护方法,防止关键点被逆向还原。
Revisiting Geometric Obfuscation with Dual Convergent Lines for Privacy-Preserving Image Queries in Visual Localization

- 通过双固定锚点生成发散线条,破坏原有几何结构
- 使攻击者无法定位原始关键点,对抗性攻击失效
- 兼容现有定位流程,适合实际部署
隐私保护图像查询(PPIQ)是云上视觉定位的新机制,允许仅用模糊特征进行位姿估计,而非使用私密图像或原始关键点。然而,当前主流的基于几何和分割的模糊方法均易受新型隐私攻击。尤其几何模糊存在根本缺陷:模糊后的邻近线仍围绕原关键点位置,暴露可被利用的线索。本文重新审视该几何范式,提出双汇聚线(DCL)这一新型关键点模糊方法,具备强抗攻击能力。DCL在中心分割线上设置两个固定锚点,每个关键点被映射到从其中一个锚点出发的直线,激活锚点由关键点位置决定。该设计使恢复原始点的优化问题变为病态:邻近线要么错误汇聚至单一锚点(平凡解),要么在分割边界附近趋于平行(高方差不稳定解),两种结果均阻碍点恢复。DCL还兼容已有基于线的求解器,可直接部署于传统定位流水线。在室内与大规模室外数据集上的实验表明,DCL在抵御隐私攻击、效率与可扩展性方面表现优异,同时保持实用的定位性能。
原文摘要 · Abstract (English)
Privacy-Preserving Image Queries (PPIQ) are an emerging mechanism for cloud-based visual localization, enabling pose estimation from obfuscated features instead of private images or raw keypoints. However, the main approaches for PPIQ, primarily geometry-based and segmentation-based obfuscation, both suffer from vulnerabilities to recent privacy attacks. In particular, a fundamental limitation of geometry-based obfuscation is that the spatial distribution of obfuscated neighboring lines still effectively surrounds the original keypoint location, providing exploitable cues for recovering the original points. We revisit this geometric paradigm and introduce Dual Convergent Lines (DCL), a novel keypoint obfuscation method demonstrating strong resilience against such attack. DCL places two fixed anchors on a central partition line and lifts each keypoint to a line originating from one of them, with the active anchor determined by the keypoint's location. This arrangement invalidates the geometry-recovery attack by making its optimization ill-posed: Neighboring lines either misleadingly converge to one anchor, yielding a trivial solution, or become near-parallel at the partition boundary, yielding an unstable high-variance solution. Both outcomes thwart point recovery. DCL is also compatible with an existing line-based solver, enabling deployment in traditional localization pipelines. Experiments on both indoor and large-scale outdoor datasets demonstrate DCL's robustness against privacy attacks, efficiency, and scalability, while achieving practical localization performance.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。