Networks for Multi-attribute Face Privacy
arXiv:2001.00561 4 Generator Discriminator Attribute Classifier Auxiliary Face Matcher Target Labels Input Image !" # #′ Output Image Match score Gender, Age, Race Real / Synthesized LD <latexit sha1_base64="7+0IjgJn4DAPQ+LbgVg/SZ8/Sno=">AAAC0HicjVHLLgRBFD3T3u/B0qZjIrHqVI9hxm6ChYUFYoaEiVSXQke/dFeLyUTE1g/Y8lXiD/gLt0pPwkKoTnffOvecU3Xv9ZLAzxRjbyVrYHBoeGR0bHxicmp6pjw7187iPBWyJeIgTo88nsnAj2RL+SqQR0kqeegF8tC72tT5wxuZZn4cHahuIjshv4j8c19wRVDnJOTqUvCgt3N3unVarjCHrdXYet1mTnW1UVtxKVhlbnWF2a7DzKqgWLtx+RUnOEMMgRwhJCIoigNwZPQcwwVDQlgHPcJSinyTl7jDOGlzYklicEKv6HtBu+MCjWivPTOjFnRKQG9KShtLpImJl1KsT7NNPjfOGv3Nu2c89d269PcKr5BQhUtC/9L1mf/V6VoUztEwNfhUU2IQXZ0oXHLTFX1z+1tVihwSwnR8RvmUYmGU/T7bRpOZ2nVvucm/G6ZG9V4U3Bwf+pY04P4U7d+DdtVxmePu1SrNjWLUo1jAIpZpnnU0sY1dtMj7Gk94xou1b91a99bDF9UqFZp5/FjW4yfjiJTW</latexit> <latexit sha1_base64="7+0IjgJn4DAPQ+LbgVg/SZ8/Sno=">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</latexit> <latexit sha1_base64="7+0IjgJn4DAPQ+LbgVg/SZ8/Sno=">AAAC0HicjVHLLgRBFD3T3u/B0qZjIrHqVI9hxm6ChYUFYoaEiVSXQke/dFeLyUTE1g/Y8lXiD/gLt0pPwkKoTnffOvecU3Xv9ZLAzxRjbyVrYHBoeGR0bHxicmp6pjw7187iPBWyJeIgTo88nsnAj2RL+SqQR0kqeegF8tC72tT5wxuZZn4cHahuIjshv4j8c19wRVDnJOTqUvCgt3N3unVarjCHrdXYet1mTnW1UVtxKVhlbnWF2a7DzKqgWLtx+RUnOEMMgRwhJCIoigNwZPQcwwVDQlgHPcJSinyTl7jDOGlzYklicEKv6HtBu+MCjWivPTOjFnRKQG9KShtLpImJl1KsT7NNPjfOGv3Nu2c89d269PcKr5BQhUtC/9L1mf/V6VoUztEwNfhUU2IQXZ0oXHLTFX1z+1tVihwSwnR8RvmUYmGU/T7bRpOZ2nVvucm/G6ZG9V4U3Bwf+pY04P4U7d+DdtVxmePu1SrNjWLUo1jAIpZpnnU0sY1dtMj7Gk94xou1b91a99bDF9UqFZp5/FjW4yfjiJTW</latexit> <latexit sha1_base64="G30nvnJkyKBlKcCymNnrqTxJgV4=">AAACtXicjVLLSgMxFD0dX7VWrWs3g0VwVTJudCnowmUF+4BaZCZNa+y8TDJCKf6AWz9O/AP9C2/iCGoRzTAzJ+fec5KbmyiPpTaMvVS8peWV1bXqem2jXtvc2m7UuzorFBcdnsWZ6kehFrFMRcdIE4t+rkSYRLHoRdNTG+/dC6Vlll6aWS6GSThJ5Vjy0BDVvm40WYu54S+CoARNlCNrPOMKI2TgKJBAIIUhHCOEpmeAAAw5cUPMiVOEpIsLPKBG2oKyBGWExE7pO6HZoGRTmltP7dScVonpVaT0sU+ajPIUYbua7+KFc7bsb95z52n3NqN/VHolxBrcEPuX7jPzvzpbi8EYx64GSTXljrHV8dKlcKdid+5/qcqQQ06cxSOKK8LcKT/P2Xca7Wq3Zxu6+KvLtKyd8zK3wJvdJfU3+NnNRdA9bAWsFVwwVLGLPRxQG49wgnO00SHLER7x5J15t97dxz3wKuWF2MG34el34YWM3A==</latexit> <latexit sha1_base64="4MrC+jrKE9Y6Uixdn4yn3AW3+G8=">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</latexit> <latexit sha1_base64="bVHLM6rdJ3hojfyxBqy7/nN4hpM=">AAACxXicjVLJTsMwFJyGfS9cuUQgJE6R01KWGxIcOHAARBepVMgxhkZkI3EQVVUhvoIrfBXiD+AveDapBIcKHCUZz3sz9vOzlwR+phh7L1lj4xOTU9Mzs3PzC4tL5eX5RhbnqZB1EQdx2vJ4JgM/knXlq0C2klTy0Atk07s90PHmvUwzP47OVS+RnZDfRP61L7giqnMRctUVPOgfDy4PL8vrzGHbW2xvx2ZOpba7VXUJ1JhbqTLbdZgZ6yjGSVx+wwWuEEMgRwiJCIpwAI6MnjZcMCTEddAnLiXkm7jEALOkzSlLUgYn9pa+NzRrF2xEc+2ZGbWgVQJ6U1La2CBNTHkpYb2abeK5cdbsKO++8dR769HfK7xCYhW6xP6lG2b+V6drUbjGrqnBp5oSw+jqROGSm1PRO7d/VKXIISFO4yuKp4SFUQ7P2TaazNSuz5ab+IfJ1KyeiyI3x6feJTV42EV7NGhUHJc57inDNFaxhk1q4w72cYQT1MnyDs94wat1Zj1Yj99XwSoVd2IFv4b19AVzU5Oa</latexit> <latexit sha1_base64="PKmVZwp+bG9nGxjnb1GtIBSU4rk=">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</latexit> <latexit sha1_base64="7+0IjgJn4DAPQ+LbgVg/SZ8/Sno=">AAAC0HicjVHLLgRBFD3T3u/B0qZjIrHqVI9hxm6ChYUFYoaEiVSXQke/dFeLyUTE1g/Y8lXiD/gLt0pPwkKoTnffOvecU3Xv9ZLAzxRjbyVrYHBoeGR0bHxicmp6pjw7187iPBWyJeIgTo88nsnAj2RL+SqQR0kqeegF8tC72tT5wxuZZn4cHahuIjshv4j8c19wRVDnJOTqUvCgt3N3unVarjCHrdXYet1mTnW1UVtxKVhlbnWF2a7DzKqgWLtx+RUnOEMMgRwhJCIoigNwZPQcwwVDQlgHPcJSinyTl7jDOGlzYklicEKv6HtBu+MCjWivPTOjFnRKQG9KShtLpImJl1KsT7NNPjfOGv3Nu2c89d269PcKr5BQhUtC/9L1mf/V6VoUztEwNfhUU2IQXZ0oXHLTFX1z+1tVihwSwnR8RvmUYmGU/T7bRpOZ2nVvucm/G6ZG9V4U3Bwf+pY04P4U7d+DdtVxmePu1SrNjWLUo1jAIpZpnnU0sY1dtMj7Gk94xou1b91a99bDF9UqFZp5/FjW4yfjiJTW</latexit> <latexit sha1_base64="7+0IjgJn4DAPQ+LbgVg/SZ8/Sno=">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</latexit> <latexit sha1_base64="7+0IjgJn4DAPQ+LbgVg/SZ8/Sno=">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</latexit> <latexit sha1_base64="7+0IjgJn4DAPQ+LbgVg/SZ8/Sno=">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</latexit> <latexit sha1_base64="7+0IjgJn4DAPQ+LbgVg/SZ8/Sno=">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</latexit> <latexit sha1_base64="7+0IjgJn4DAPQ+LbgVg/SZ8/Sno=">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</latexit> LA <latexit sha1_base64="ljXmF37Llrl81rV1fQ78Ns6CQk4=">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</latexit> <latexit sha1_base64="ljXmF37Llrl81rV1fQ78Ns6CQk4=">AAAC0HicjVHLLgRBFD3T3u/B0qZjIrHqVI9hxm6wsbBAzJAwkepS6OiX7moxmYjY+gFbvkr8AX/hVulJWAjV6e5b555zqu69XhL4mWLsrWQNDA4Nj4yOjU9MTk3PlGfn2lmcp0K2RBzE6ZHHMxn4kWwpXwXyKEklD71AHnpXWzp/eCPTzI+jA9VNZCfkF5F/7guuCOqchFxdCh70du5ON07LFeawtRpbr9vMqa42aisuBavMra4w23WYWRUUazcuv+IEZ4ghkCOERARFcQCOjJ5juGBICOugR1hKkW/yEncYJ21OLEkMTugVfS9od1ygEe21Z2bUgk4J6E1JaWOJNDHxUor1abbJ58ZZo79594ynvluX/l7hFRKqcEnoX7o+8786XYvCORqmBp9qSgyiqxOFS266om9uf6tKkUNCmI7PKJ9SLIyy32fbaDJTu+4tN/l3w9So3ouCm+ND35IG3J+i/XvQrjouc9y9WqW5WYx6FAtYxDLNs44mtrGLFnlf4wnPeLH2rVvr3nr4olqlQjOPH8t6/ATcaJTT</latexit> <latexit sha1_base64="ljXmF37Llrl81rV1fQ78Ns6CQk4=">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</latexit> <latexit sha1_base64="ljXmF37Llrl81rV1fQ78Ns6CQk4=">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</latexit> LM <latexit sha1_base64="Z2C6iZioE2mvy0K3nmyxeWXg0lg=">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</latexit> <latexit sha1_base64="Z2C6iZioE2mvy0K3nmyxeWXg0lg=">AAAC0HicjVHLLgRBFD3T3uM1WNp0TCRWnerxaHbCxoIEMUbCZFJdCh390l0tZCJi6wds+SrxB/yFW6UnYSFUp7tvnXvOqbr3+mkY5Iqxt4rV1z8wODQ8Uh0dG5+YrE1NH+ZJkQnZFEmYZEc+z2UYxLKpAhXKozSTPPJD2fIvN3W+dS2zPEjiA3WbynbEz+PgLBBcEdQ+ibi6EDzsbt91djq1OnO8lSVvddFmzuIyazCXArbWcD3Pdh1mVh3l2k1qrzjBKRIIFIggEUNRHIIjp+cYLhhSwtroEpZRFJi8xB2qpC2IJYnBCb2k7zntjks0pr32zI1a0CkhvRkpbcyTJiFeRrE+zTb5wjhr9DfvrvHUd7ulv196RYQqXBD6l67H/K9O16JwhlVTQ0A1pQbR1YnSpTBd0Te3v1WlyCElTMenlM8oFkbZ67NtNLmpXfeWm/y7YWpU70XJLfChb0kD7k3R/j04bDguc9y9pfr6RjnqYcxiDgs0Tw/r2MIumuR9hSc848Xat26se+vhi2pVSs0Mfizr8RMUd5Tr</latexit> <latexit sha1_base64="Z2C6iZioE2mvy0K3nmyxeWXg0lg=">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</latexit> <latexit sha1_base64="Z2C6iZioE2mvy0K3nmyxeWXg0lg=">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</latexit> Target Labels Input Image !" # #′ Output Image Original Labels !; A) B) <=>? <@""> A B Fig. 2: Schematic representation of the architecture of PrivacyNet for deriving perturbations to obfuscate three attribute classifiers, gender, age, and race, while allowing biometric face matchers to perform well. (A) Different components of the PrivacyNet: generator, source discriminator, attribute classifier, and auxiliary face matcher. (B) Cycle-consistency constraint applied to the generator by transforming an input face image to a target label and reconstructing the original version. Gender Age Race PrivacyNet M: G: A: R: M: G: A: R: M: G: A: R: M: G: A: R: M: G: A: R: M: G: A: R: M: G: A: R: M: G: A: R: Original image Gender Age Race M: G: A: R: M: G: A: R: M: G: A: R: M: G: A: R: M: G: A: R: M: G: A: R: M: G: A: R: M: G: A: R: Original image PrivacyNet: Transforming face images for obfuscating soft-biometric attributes Fig. 1: Illustration of the overall objective of this work: transforming an input face image across three orthogonal axes for imparting multi-attribute privacy selectively while retaining recognition utility. The abbreviated letters are M: Matching, G: Gender, A: Age, and R: Race. for predicting the gender from face images has resulted in models with almost perfect prediction accuracy [28], [30], [31], [32], [33]. Methods for estimating the apparent age from face images are similarly well studied, and current-state of the art methods can predict the apparent age of a person with a prediction error below three years on average [26], [27], [34], [35]. While tremendous progress has been made towards the man observer with high con generating su posed, and th DNN-based m versarial attac [41], [42], [43 attacks raises chine learning [39], [46], [47 robustness of the soft-biome sarial attacks. perturbations investigated t bations for im This scheme to conceal m these perturba derive advers classifier, the p across unseen application, g seen attribute Recently, privacy throu sentation vect ~2018-present: Increasing focus on user privacy