=Paper=
{{Paper
|id=Vol-1263/paper87
|storemode=property
|title=MediaEval 2014 Visual Privacy Task: Geometrical Privacy Protection Tool
|pdfUrl=https://ceur-ws.org/Vol-1263/mediaeval2014_submission_87.pdf
|volume=Vol-1263
|dblpUrl=https://dblp.org/rec/conf/mediaeval/KorshunovE14
}}
==MediaEval 2014 Visual Privacy Task: Geometrical Privacy Protection Tool==
MediaEval 2014 Visual Privacy Task: Geometrical Privacy Protection Tool Pavel Korshunov Touradj Ebrahimi MMSPG, EPFL MMSPG, EPFL pavel.korshunov@epfl.ch touradj.ebrahimi@epfl.ch ABSTRACT other explores the privacy-pleasantness tradeoff, which is about This paper describes EPFL privacy protection tool for the MediaE- how socially acceptable is a given privacy protection tool for a hu- val 2014 Visual Privacy task. The goal of the task is to obscure man observer. This year, the task is also separates visual privacy faces, body silhouettes, and personal items of people in the pro- features into two types: low detailed features, such as body sil- vided surveillance clips to preserve their personal privacy. The houettes, and features with high details, such as faces or personal EPFL privacy protection tool mainly relies on two privacy protec- items [1]. tion filters: a warping-based reversible filter to obscure features In the submission to MediaEval 2014 Privacy task, EPFL aimed with low visual details (body silhouettes) by distorting them with to address both tradeoffs and separately obscure two types of vi- randomized warping and morphing-based reversible filter to ob- sual features. Therefore, the proposed privacy protection tool con- scure features with high visual details (faces and personal items) by sists of two privacy protection filters: a warping-based filter [6] that ‘replacing’ them with a graphical representation. The aim of this obscures features with low visual details by distorting them with tool is to achieve an acceptable balance between privacy (how well randomized warping and morphing-based filter [5] to obscure fea- the privacy is protected) and intelligibility (how well the surveil- tures with high visual details by ‘replacing’ them with a graphical lance task can still be performed), as well as, privacy and pleasant- representation. The privacy protection tool is implemented using ness (how pleasant is the protection). The results of three types of Python, OpenCV1 , and Matlab. subjective evaluations, via crowdsourcing, practitioners, and stake- Organizers of the task provided video dataset [4] with annota- holders, provided by the organizers of the task demonstrates that tions of privacy sensitive regions including faces, hair, skin, acces- EPFL privacy protection tool achieves a great overall balance be- sories, and body regions, as well as classification of these regions tween privacy, intelligibility, and pleasantness, while being secure into low, medium, oh high detailed features. The tool, therefore, and reversible in the same time. assumed the privacy regions known (in a practical scenario, they can be detected by video analytics) and focused on developing the privacy protection tool that achieves an acceptable balance between 1. INTRODUCTION privacy (how well the privacy is protected) and intelligibility (how Recent adoption of digital video surveillance systems, especially well the surveillance task can still be performed), as well as, pri- in public spaces and communities, has significantly increased the vacy and pleasantness (how pleasant is the protection). concern for intrusion into individual privacy. New sensing tech- nologies, such as ultra high definition, high dynamic range, or video capturing with mini-drones, threaten to eradicate boundaries of pri- 2. KEY DECISIONS AND CHALLENGES vate space even more. As a possible solution, many privacy protec- The best privacy preserving filter would be a blacked out camera tion tools have been proposed for preserving privacy, ranging from with no video feed, but, in such case, there would be no surveillance simple methods such as masking blurring, pixelization, or mask- possible and intelligibility would be zero. Therefore, a usable pri- ing to more advanced methods satisfying the following desirable vacy protection filter should have a balance between privacy and practical properties: reversibility, robustness, and security. The ad- intelligibility. Similarly, an encryption or scrambling based privacy vanced methods can be divided into several categories: encryption- filters could lead to high privacy but can be annoying or even scary, based [7], scrambling-based [2], and geometrical-based [6, 5] meth- resulting in very low pleasantness. Another important practical re- ods. quirement is the secure reversibility of the privacy protection tool, Despite wide availability of visual privacy protection tools, with so that the protection can be undone in secure way (only if one has an exception of some work [3], little is known about which tools a secret key) to restore the original video in case police or court are suitable for practical applications. To close this gap, MediaE- would require it. val 2014 Visual Privacy task was designed to facilitate submissions To achieve the balance between privacy, intelligibility, and pleas- of different protection tools and to benchmark them on practical antness, as well as to provide reversible protection, the proposed privacy video dataset [4] via several types of subjective evalua- privacy protection tool adopted a two-stage approach: (i) reversible tions. Moreover, the focus of this task is twofold: one explores the warping filter [6] is applied on body silhouettes as a low detailed privacy-intelligibility tradeoff, which is between how well surveil- visual feature to distort general personal appearance and (ii) re- lance can be performed while privacy is being preserved, and an- versible morphing filter [5] on faces and personal items as high de- tailed visual features to remove all the identifiable details. Figure 1 illustrates how the proposed tool protects privacy of people. Copyright is held by the author/owner(s). 1 MediaEval 2014 Workshop, October 16-17, 2014, Barcelona, Spain http://opencv.org/ Table 1: Results of three different subjective evaluations for EPFL privacy protection tool compared to average. Crowdsourcing Stakeholders Practitioners EPFL Average EPFL Average EPFL Average Intelligibility 73.2 74.8 67.7 79.3 59.5 69.5 Privacy 51.0 50.2 61.6 46.5 57.3 41.6 Pleasantness 23.6 24.8 40.7 69.5 46.3 59.7 more suitable for the scenarios where the observers are naïve sub- jects as it is in the case of crowdsourcing. The low intelligibility score can be compensated by the fact that the tool is reversible and original video can be securely restored, which would allow the de- tailed examination of the video data if necessary. Low pleasantness value is probably due to the choice of graphical representations for faces and personal items (see Figure 1), which subjects did not like. A more appropriate and use case oriented choice of such represen- tation may improve the pleasantness of the visual protection. 4. CONCLUSION EPFL privacy protection tool combines warping and morphing privacy protection filters and achieves an acceptable balance be- tween privacy, intelligibility, and pleasantness, providing, in the same time, ability to securely restore the original content if neces- sary. In a practical scenario, a better fitting graphical representa- tions of the faces and personal items can be selected. Acknowledgments This work was conducted in the framework of the EC funded Net- work of Excellence VideoSense. 5. REFERENCES [1] A. Badii, T. Ebrahimi, C. Fedorczak, P. Korshunov, T. Piatrik, Figure 1: Original (above) and privacy protected (below) snapshots V. Eiselein, and A. Al-Obaidi. Overview of the MediaEval of fighting scene video. 2014 visual privacy task. In MediaEval 2014 Workshop, Barcelona, Spain, October 16-17 2014. [2] F. Dufaux and T. Ebrahimi. Scrambling for privacy protection Warping filter makes the details of the visible object unrecogniz- in video surveillance systems. IEEE Trans. on Circuits and able (i.e., privacy is increased), but, by controlling the strength of Systems for Video Technology, 18(8):1168–1174, Aug. 2008. the filter, the overall general shape of the object can be preserved, [3] P. Korshunov, C. Araimo, F. De Simone, C. Velardo, so it would still be possible to understand what is going on in the J. Dugelay, and T. Ebrahimi. Evaluation of visual privacy surveillance scene (i.e., intelligibility is not decreased). Morphing filters impact on video surveillance intelligibility. In filter replaces faces and personal items with the graphical represen- International Workshop on Quality of Multimedia Experience tation, e.g., ‘smiley face’ instead of the original face, which effec- (QoMEX), pages 150–151, July 2012. tively removes all personal details, i.e., privacy is increased, with [4] P. Korshunov and T. Ebrahimi. PEViD: privacy evaluation the aim to keep both intelligibility and pleasantness/appropriateness video dataset. In SPIE Applications of Digital Image high. Processing XXXVI, volume 8856, San Diego, California, USA, Aug. 2013. 3. EVALUATION RESULTS [5] P. Korshunov and T. Ebrahimi. Using face morphing to protect The organizers provided the results from three subjective eval- privacy. In IEEE International Conference on Advanced Video uations: crowdsourcing-based evaluation in Stream 1, evaluation and Signal-Based Surveillance (AVSS), pages 208–213, by stakeholders and surveillance experts in Stream 2, and evalua- Krakow, Poland, Aug. 2013. tion by practitioners and data protection experts in Stream 3. The [6] P. Korshunov and T. Ebrahimi. Using warping for privacy corresponding results of the EPFL privacy protection tool are sum- protection in video surveillance. In 18th International marized in the Table 1 and compared against the average of the total Conference on Digital Signal Processing (DSP), pages 1–6, 8 submissions to the Privacy Task of MediaEval 2014. Santorini, Greece, July 2013. From the table, it can be noted that across all evaluations, the [7] T. Winkler and B. Rinner. TrustCAM: Security and tool demonstrates higher than average level of privacy but under- privacy-protection for an embedded smart camera based on performs in terms of intelligibility and pleasantness. In crowd- trusted computing. In IEEE International Conference on sourcing evaluation, the performance of the tool is nearer to average Advanced Video and Signal Based Surveillance (AVSS), pages compared to other two evaluations. It means that the tool would be 593–600, Sept. 2010.