Protego：面向用户的姿态不变隐私保护，防止人脸识别引发的数字足迹暴露
Protego: User-Centric Pose-Invariant Privacy Protection Against Face Recognition-Induced Digital Footprint Exposure
AI总结：
Protego提出一种以用户为中心的姿态不变隐私保护方法，通过3D面部签名生成动态3D面具并放大FR模型敏感性，显著降低黑盒人脸检索准确率，性能优于现有方法至少2倍。
摘要：
人脸识别（FR）技术正日益被用于驱动大规模图像检索系统，引发了严重的隐私问题。诸如Clearview AI和PimEyes之类的服务允许任何人上传一张面部照片，并检索与该人相关的大量在线内容。这不仅使得身份推断成为可能，而且还会暴露其数字足迹，例如社交媒体活动、私人照片和新闻报道，通常未经其同意。针对这一新兴威胁，我们提出了Protego，一种以用户为中心的隐私保护方法，用于保护面部图像免受此类基于检索的隐私侵犯。Protego将用户的3D面部签名封装为姿态不变的2D表示，该表示可动态变形为适合用户任何面部图像的姿态和表情的自然外观3D面具，并在在线共享之前应用。受现有方法关键局限性的启发，Protego放大了FR模型的敏感性，使得受保护的图像即使彼此之间也无法匹配。实验表明，Protego在广泛的黑盒FR模型中显著降低了检索准确率，并且性能至少比现有方法好2倍。它还提供了前所未有的视觉连贯性，特别是在一致性和自然外观至关重要的视频设置中。总体而言，Protego有助于对抗FR被滥用于大规模监控和未经请求的身份追踪。
英文摘要：
Face recognition (FR) technologies are increasingly used to power large-scale image retrieval systems, raising serious privacy concerns. Services like Clearview AI and PimEyes allow anyone to upload a facial photo and retrieve a large amount of online content associated with that person. This not only enables identity inference but also exposes their digital footprint, such as social media activity, private photos, and news reports, often without their consent. In response to this emerging threat, we propose Protego, a user-centric privacy protection method that safeguards facial images from such retrieval-based privacy intrusions. Protego encapsulates a user's 3D facial signatures into a pose-invariant 2D representation, which is dynamically deformed into a natural-looking 3D mask tailored to the pose and expression of any facial image of the user, and applied prior to online sharing. Motivated by a critical limitation of existing methods, Protego amplifies the sensitivity of FR models so that protected images cannot be matched even among themselves. Experiments show that Protego significantly reduces retrieval accuracy across a wide range of black-box FR models and performs at least 2x better than existing methods. It also offers unprecedented visual coherence, particularly in video settings where consistency and natural appearance are essential. Overall, Protego contributes to the fight against the misuse of FR for mass surveillance and unsolicited identity tracing.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
