Lens Privacy Sealing: A New Benchmark and Method for Physical Privacy-Preserving Action Recognition

• URL: http://arxiv.org/abs/2605.19578v2
• Date: Thu, 21 May 2026 10:01:47 GMT
• Title: Lens Privacy Sealing: A New Benchmark and Method for Physical Privacy-Preserving Action Recognition
• Abstract summary: RGB camera-based surveillance systems enable human action recognition for public safety and healthcare.<n>Existing methods rely on post-capture algorithms, which fail to protect privacy during data acquisition.<n>We propose Lens Privacy Sealing (LPS), a simple hardware solution that physically obscures camera lenses with adjustable film.
• Score: 45.858644584022635
• License: http://creativecommons.org/licenses/by-nc-nd/4.0/
• Abstract: RGB camera-based surveillance systems enable human action recognition for public safety and healthcare, yet raise serious privacy concerns. Existing methods rely on post-capture algorithms, which fail to protect privacy during data acquisition. We propose Lens Privacy Sealing (LPS), a simple hardware solution that physically obscures camera lenses with adjustable laminating film, providing pre-sensor privacy protection at minimal cost. Unlike software methods or expensive engineered optics, LPS achieves strong privacy through stochastic multi-layer scattering that is physically irreversible. We introduce the P$^3$AR dataset for privacy-preserving action recognition, featuring both large-scale replay-captured (P$^3$AR-NTU, 114K videos) and real-world collected (P$^3$AR-PKU) subsets with privacy attribute annotations. To handle video degradation from LPS, we propose MSPNet, a single-stage framework incorporating Inter-Frame Noise Suppressor (IFNS) and Cross-Frame Semantic Aggregator (CFSA), enhanced by contrastive language-image pre-training for robust semantic extraction. Extensive experiments demonstrate that MSPNet with IFNS and CFSA nearly doubles action recognition accuracy compared to baseline methods while suppressing identity recognition to low levels. Comprehensive validation shows LPS achieves a superior privacy-utility trade-off compared to state-of-the-art hardware methods, resists reconstruction attacks including PSF inversion and data-driven recovery, and generalizes robustly across optical configurations and challenging environments. Code is available at https://github.com/wangzy01/MSPNet.

Related papers

• A Parallel Region-Adaptive Differential Privacy Framework for Image Pixelization [4.738949927143789]
  Differentially private pixelization offers mathematically guaranteed protection for visual data through noise addition.<n>We propose a novel parallel, region-adaptive pixelization framework that combines the theoretical rigor of differential privacy with practical efficiency.<n>Our method adaptively adjusts grid sizes and noise scales based on regional complexity, leveraging GPU parallelism to achieve significant runtime acceleration.<n>This validates its suitability for real-time privacy-critical applications such as elderly care, smart home monitoring, driver behavior analysis, and crowd behavior monitoring.
  arXiv  Detail & Related papers  (2025-11-06T10:51:20Z)
• RL-MoE: An Image-Based Privacy Preserving Approach In Intelligent Transportation System [0.9831489366502302]
  We propose RL-MoE, a novel framework that transforms sensitive visual data into privacy-preserving textual descriptions.<n> RL-MoE combines a Mixture-of-Experts (MoE) architecture for nuanced, multi-aspect scene decomposition with a Reinforcement Learning (RL) agent.<n>Our work provides a practical and scalable solution for building trustworthy AI systems in privacy-sensitive domains.
  arXiv  Detail & Related papers  (2025-08-07T18:07:54Z)
• Privacy-Aware Decoding: Mitigating Privacy Leakage of Large Language Models in Retrieval-Augmented Generation [26.573578326262307]
  Privacy-Aware Decoding (PAD) is a lightweight, inference-time defense that adaptively injects calibrated Gaussian noise into token logits during generation.<n>PAD integrates confidence-based screening to selectively protect high-risk tokens, efficient sensitivity estimation to minimize unnecessary noise, and context-aware noise calibration to balance privacy with generation quality.<n>Our work takes an important step toward mitigating privacy risks in RAG via decoding strategies, paving the way for universal and scalable privacy solutions in sensitive domains.
  arXiv  Detail & Related papers  (2025-08-05T05:22:13Z)
• Urania: Differentially Private Insights into AI Use [102.27238986985698]
  $Urania$ provides end-to-end privacy protection by leveraging DP tools such as clustering, partition selection, and histogram-based summarization.<n>Results show the framework's ability to extract meaningful conversational insights while maintaining stringent user privacy.
  arXiv  Detail & Related papers  (2025-06-05T07:00:31Z)
• Enhancing Privacy in Semantic Communication over Wiretap Channels leveraging Differential Privacy [51.028047763426265]
  Semantic communication (SemCom) improves transmission efficiency by focusing on task-relevant information.<n> transmitting semantic-rich data over insecure channels introduces privacy risks.<n>This paper proposes a novel SemCom framework that integrates differential privacy mechanisms to protect sensitive semantic features.
  arXiv  Detail & Related papers  (2025-04-23T08:42:44Z)
• Activity Recognition on Avatar-Anonymized Datasets with Masked Differential Privacy [64.32494202656801]
  Privacy-preserving computer vision is an important emerging problem in machine learning and artificial intelligence.<n>We present anonymization pipeline that replaces sensitive human subjects in video datasets with synthetic avatars within context.<n>We also proposeMaskDP to protect non-anonymized but privacy sensitive background information.
  arXiv  Detail & Related papers  (2024-10-22T15:22:53Z)
• Privacy-Enhancing Optical Embeddings for Lensless Classification [17.169529483306103]
  We build a prototype from a low-cost LCD and Raspberry Pi components, for a total cost of around 100 USD. We show how the proposed system, through variable mask patterns, can thwart adversaries that attempt to invert the system.
  arXiv  Detail & Related papers  (2022-11-23T11:12:21Z)
• Privacy-Preserving Action Recognition via Motion Difference Quantization [22.31448780032675]
  This paper proposes a simple, yet robust privacy-preserving encoder called BDQ. It is composed of three modules: Blur, Difference, and Quantization. Experiments on three benchmark datasets show that the proposed encoder design can achieve state-of-the-art trade-off.
  arXiv  Detail & Related papers  (2022-08-04T05:03:27Z)
• PrivHAR: Recognizing Human Actions From Privacy-preserving Lens [58.23806385216332]
  We propose an optimizing framework to provide robust visual privacy protection along the human action recognition pipeline. Our framework parameterizes the camera lens to successfully degrade the quality of the videos to inhibit privacy attributes and protect against adversarial attacks.
  arXiv  Detail & Related papers  (2022-06-08T13:43:29Z)
• Privacy-sensitive Objects Pixelation for Live Video Streaming [52.83247667841588]
  We propose a novel Privacy-sensitive Objects Pixelation (PsOP) framework for automatic personal privacy filtering during live video streaming. Our PsOP is extendable to any potential privacy-sensitive objects pixelation. In addition to the pixelation accuracy boosting, experiments on the streaming video data we built show that the proposed PsOP can significantly reduce the over-pixelation ratio in privacy-sensitive object pixelation.
  arXiv  Detail & Related papers  (2021-01-03T11:07:23Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.