Deep network models can obtain human gait biometrics from video gait sequences and recognize character identities through feature matching,which threatens human privacy.Privacy protection treatments such as blurring and deformation of the human body in video images can to some extent change the appearance of the human body.Still,it is difficult to change the walking posture of the characters and cannot avoid recognition by deep network models.Moreover,this treatment often accompanies serious damage to video quality,reducing the visual usability of the video.In response to this issue,this article proposed a video gait privacy protection algorithm based on sparse adversarial attack on silhouette,which calculates effective modification positions around human silhouette in the image through adversarial attacks on gait recognition models.Compared with traditional methods,this algorithm reduces the modification of images while maintaining the same privacy protection capabilities.The optimal balance between privacy security and visual availability was obtained.The algorithm is tested on four gait recognition models using the public gait datasets CASIA-B and OUMVLP,and previous gait privacy protection methods are implemented and compared,verifying the effectiveness and availability of this algorithm in gait privacy protection.
关键词
步态隐私保护/步态识别/轮廓稀疏对抗/对抗样本
Key words
gait privacy protection/gait recognition/sparse adversarial attack on silhouette/adversarial samples
维普
万方数据