arXiv:2605.19578cs.CVcs.AI2026-05中稿 · IEEE Transactions …

用可调贴膜物理遮挡镜头,实现低成本隐私保护的动作识别。

Lens Privacy Sealing: A New Benchmark and Method for Physical Privacy-Preserving Action Recognition

论文配图:Lens Privacy Sealing: A New Benchmark and Method for Physical Privacy-Preserving Action Recognition
图 1 · 摘自论文原文
  • 通过多层散射贴膜实现不可逆的物理隐私保护。
  • 新数据集含11.4万段视频,支持真实场景动作识别与隐私标注。
  • 模型融合去噪与语义聚合,兼顾识别准确率与隐私安全。

基于RGB摄像头的监控系统可用于公共安全与医疗健康中的动作识别,但引发严重隐私问题。现有方法依赖捕获后的软件处理,无法在数据采集阶段保护隐私。本文提出Lens Privacy Sealing(LPS),一种低成本硬件方案:通过可调节的层压膜物理遮蔽镜头,在传感器前实现隐私保护。与软件方法或昂贵光学设计不同,LPS利用随机多层散射实现不可逆隐私防护。我们构建了P³AR数据集,包含大规模重播采集(P³AR-NTU,114K视频)和真实场景收集(P³AR-PKU)两部分,并标注隐私属性。为应对LPS导致的视频退化,提出MSPNet框架,集成帧间噪声抑制器(IFNS)与跨帧语义聚合器(CFSA),并结合对比语言图像预训练增强语义提取能力。大量实验表明,引入IFNS与CFSA后,动作识别准确率接近翻倍,同时将身份识别率压制在极低水平。全面验证显示,相比当前最优硬件方法,LPS在隐私-效用权衡上表现更优,能有效抵御点扩散函数反演与数据驱动恢复等重建攻击,且在多种光学配置与复杂环境下具有强泛化能力。代码已开源。

原文摘要 · Abstract (English)

RGB camera-based surveillance systems enable human action recognition for public safety and healthcare, yet raise serious privacy concerns. Existing methods rely on post-capture algorithms, which fail to protect privacy during data acquisition. We propose Lens Privacy Sealing (LPS), a simple hardware solution that physically obscures camera lenses with adjustable laminating film, providing pre-sensor privacy protection at minimal cost. Unlike software methods or expensive engineered optics, LPS achieves strong privacy through stochastic multi-layer scattering that is physically irreversible. We introduce the P$^3$AR dataset for privacy-preserving action recognition, featuring both large-scale replay-captured (P$^3$AR-NTU, 114K videos) and real-world collected (P$^3$AR-PKU) subsets with privacy attribute annotations. To handle video degradation from LPS, we propose MSPNet, a single-stage framework incorporating Inter-Frame Noise Suppressor (IFNS) and Cross-Frame Semantic Aggregator (CFSA), enhanced by contrastive language-image pre-training for robust semantic extraction. Extensive experiments demonstrate that MSPNet with IFNS and CFSA nearly doubles action recognition accuracy compared to baseline methods while suppressing identity recognition to low levels. Comprehensive validation shows LPS achieves a superior privacy-utility trade-off compared to state-of-the-art hardware methods, resists reconstruction attacks including PSF inversion and data-driven recovery, and generalizes robustly across optical configurations and challenging environments. Code is available at https://github.com/wangzy01/MSPNet.

隐私保护动作识别硬件方案数据集

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。