Abstract:Privacy protection data processing has been critical in recent years when pervasively equipped mobile devices could easily capture high-resolution personal images and videos that may disclose personal information. We propose a new controllable and reversible privacy protection system to address the concern in this work. The proposed scheme can automatically and stably anonymize and de-anonymize face images with one neural network and provide strong security protection with multi-factor identification solutions. Furthermore, users can include other attributes as identification factors, such as passwords and specific facial attributes. Our solution lies in a modified conditional-GAN-based training framework, the Multi-factor Modifier (MfM), to simultaneously accomplish the function of multi-factor facial anonymization and de-anonymization. It can successfully anonymize face images while generating realistic faces satisfying the conditions specified by the multi-factor features, such as gender, hair colors, and facial appearance. Furthermore, MfM can also de-anonymize de-identified faces to their corresponding original ones. One crucial part of our work is design of physically meaningful information-theory-based loss functions, which include mutual information between authentic and de-identification images and mutual information between original and re-identification images. Moreover, extensive experiments and analyses show that, with the correct multi-factor feature information, the MfM can effectively achieve nearly perfect reconstruction and generate high-fidelity and diverse anonymized faces to defend attacks from hackers better than other methods with compatible functionalities. Finally, we justify the advantages of this work through perceptual quality comparison experiments. Our experiments show that the resulting LPIPS (with a value of 0.35), FID (with a value of 28), and SSIM (with a value of 0.95) of MfM demonstrate significantly better de-identification effects than state-of-the-art works. Additionally, the MfM we designed can achieve re-identification, which improves real-world practicability.

FIBNet: Privacy-Enhancing Approach for Face Biometrics Based on the Information Bottleneck Principle

Res-DFNN: an NN-Based Device Fingerprint Extraction Method Using Network Packet Data

Industrial Scale Privacy Preserving Deep Neural Network

Enhanced Embedded AutoEncoders: an Attribute-Preserving Face De-Identification Framework

Deep Face Fuzzy Vault: Implementation and Performance

Face-Inception-Net for Recognition

Face Anti-Spoofing with Local Difference Network and Binary Facial Mask Supervision

People Taking Photos That Faces Never Share: Privacy Protection and Fairness Enhancement from Camera to User

AnonymousNet: Natural Face De-Identification With Measurable Privacy

Utility-Aware Privacy-Preserving Federated Learning Through Information Bottleneck

Towards a Controllable and Reversible Privacy Protection System for Facial Images through Enhanced Multi-Factor Modifier Networks

High Resolution Face Privacy-Enhancing Method Based on Latent Optimization with Identity-Preserving Facial Masking

A Unified Framework of Graph Information Bottleneck for Robustness and Membership Privacy

Invertible Mask Network for Face Privacy-Preserving

Secure Dual Network for Reversible Facial Image Anonymization Through the Latent Space Manipulation

Transferable Adversarial Facial Images for Privacy Protection

Privacy-Preserving Face Recognition in Hybrid Frequency-Color Domain

FOBNN: Fast Oblivious Binarized Neural Network Inference

DuetFace: Collaborative Privacy-Preserving Face Recognition via Channel Splitting in the Frequency Domain

Facial Expression Recognition with Controlled Privacy Preservation and Feature Compensation

BiFPro: A Bidirectional Facial-data Protection Framework Against DeepFake