{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,19]],"date-time":"2026-07-19T03:02:08Z","timestamp":1784430128213,"version":"3.55.0"},"reference-count":312,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"},{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"am","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans.Inform.Forensic Secur."],"published-print":{"date-parts":[[2021]]},"DOI":"10.1109\/tifs.2021.3096024","type":"journal-article","created":{"date-parts":[[2021,7,12]],"date-time":"2021-07-12T20:23:47Z","timestamp":1626121427000},"page":"4147-4183","source":"Crossref","is-referenced-by-count":186,"title":["Privacy\u2013Enhancing Face Biometrics: A Comprehensive Survey"],"prefix":"10.1109","volume":"16","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-1690-4798","authenticated-orcid":false,"given":"Blaz","family":"Meden","sequence":"first","affiliation":[{"name":"Faculty of Computer and Information Science, University of Ljubljana, Ljubljana, Slovenia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4491-2744","authenticated-orcid":false,"given":"Peter","family":"Rot","sequence":"additional","affiliation":[{"name":"Faculty of Electrical Engineering, University of Ljubljana, Ljubljana, Slovenia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8250-5712","authenticated-orcid":false,"given":"Philipp","family":"Terhorst","sequence":"additional","affiliation":[{"name":"Fraunhofer Institute for Computer Graphics Research IGD, Darmstadt, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7910-7895","authenticated-orcid":false,"given":"Naser","family":"Damer","sequence":"additional","affiliation":[{"name":"Fraunhofer Institute for Computer Graphics Research IGD, Darmstadt, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6413-0061","authenticated-orcid":false,"given":"Arjan","family":"Kuijper","sequence":"additional","affiliation":[{"name":"Fraunhofer Institute for Computer Graphics Research IGD, Darmstadt, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9649-8074","authenticated-orcid":false,"given":"Walter J.","family":"Scheirer","sequence":"additional","affiliation":[{"name":"Department of Computer Science and Engineering, University of Notre Dame, Notre Dame, IN, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8850-3013","authenticated-orcid":false,"given":"Arun","family":"Ross","sequence":"additional","affiliation":[{"name":"Department of Computer Science and Engineering, Michigan State University, East Lansing, MI, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9744-4035","authenticated-orcid":false,"given":"Peter","family":"Peer","sequence":"additional","affiliation":[{"name":"Faculty of Computer and Information Science, University of Ljubljana, Ljubljana, Slovenia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3385-5780","authenticated-orcid":false,"given":"Vitomir","family":"Struc","sequence":"additional","affiliation":[{"name":"Faculty of Electrical Engineering, University of Ljubljana, Ljubljana, Slovenia"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref275","doi-asserted-by":"publisher","DOI":"10.1109\/QoMEX.2014.6982324"},{"key":"ref274","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00103"},{"key":"ref277","article-title":"Privacy-preserving deep action recognition: An adversarial learning framework and a new dataset","author":"wu","year":"2019","journal-title":"arXiv 1906 05675"},{"key":"ref276","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.527"},{"key":"ref271","doi-asserted-by":"publisher","DOI":"10.1145\/2348283.2348292"},{"key":"ref270","article-title":"Facial privacy protection in airborne recreational videography","author":"sarwar","year":"2019"},{"key":"ref170","article-title":"Generative adversarial privacy","author":"huang","year":"2018","journal-title":"arXiv 1807 05306"},{"key":"ref273","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2009.5459413"},{"key":"ref272","doi-asserted-by":"publisher","DOI":"10.1145\/2911996.2912018"},{"key":"ref172","doi-asserted-by":"publisher","DOI":"10.1109\/ICB2018.2018.00023"},{"key":"ref171","year":"2021","journal-title":"MPLab GENKI Database"},{"key":"ref174","article-title":"The AR face database","author":"martinez","year":"1998"},{"key":"ref173","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2015.425"},{"key":"ref176","doi-asserted-by":"publisher","DOI":"10.1080\/02699930903485076"},{"key":"ref175","doi-asserted-by":"publisher","DOI":"10.1109\/FGR.2006.78"},{"key":"ref178","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00044"},{"key":"ref177","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.463"},{"key":"ref168","article-title":"UCF101: A dataset of 101 human actions classes from videos in the wild","author":"soomro","year":"2012","journal-title":"arXiv 1212 0402"},{"key":"ref169","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.398"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/BTAS.2014.6996276"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2011.161"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/IWOBI.2017.7985521"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW.2017.173"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/MIPRO.2014.6859759"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2008.4587369"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP.2014.6853696"},{"key":"ref267","doi-asserted-by":"publisher","DOI":"10.1109\/MIPRO.2016.7522350"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1049\/iet-spr.2016.0756"},{"key":"ref268","doi-asserted-by":"publisher","DOI":"10.1109\/ICME.2010.5583552"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00883"},{"key":"ref269","first-page":"1","article-title":"Overview of the mediaeval 2014 visual privacy task","volume":"1263","author":"badii","year":"2014","journal-title":"Proc CEUR Workshop"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/IIH-MSP.2012.13"},{"key":"ref288","year":"2008","journal-title":"Biometric Information Privacy Act (BIPA)"},{"key":"ref287","year":"2011"},{"key":"ref286","year":"2013","journal-title":"The OECD Privacy Framework"},{"key":"ref285","year":"2018","journal-title":"Privacy Measures of Biometrics Businesses"},{"key":"ref181","doi-asserted-by":"publisher","DOI":"10.1145\/1360612.1360638"},{"key":"ref284","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-57959-7"},{"key":"ref180","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-33720-9_44"},{"key":"ref283","year":"2018"},{"key":"ref282","year":"2019"},{"key":"ref281","year":"2019","journal-title":"First Universal Privacy Guidelines for Biometrics"},{"key":"ref185","doi-asserted-by":"publisher","DOI":"10.1109\/34.927467"},{"key":"ref280","year":"1948","journal-title":"Universal Declaration of Human Rights"},{"key":"ref184","doi-asserted-by":"publisher","DOI":"10.1162\/jocn.1991.3.1.71"},{"key":"ref183","doi-asserted-by":"publisher","DOI":"10.1109\/ICIP.2015.7350779"},{"key":"ref182","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-16811-1_11"},{"key":"ref189","first-page":"1","article-title":"Face analysis: Identity vs. expressions","author":"mercier","year":"2005","journal-title":"Proc Int Soc Gesture Stud Symp"},{"key":"ref188","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP.2014.6853651"},{"key":"ref187","doi-asserted-by":"publisher","DOI":"10.1109\/BTAS.2014.6996249"},{"key":"ref186","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-40779-6_2"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/TSMCC.2010.2042446"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1145\/2545883"},{"key":"ref179","article-title":"Countering adversarial images using input transformations","author":"guo","year":"2017","journal-title":"arXiv 1711 00117"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1117\/1.JEI.26.5.051406"},{"key":"ref20","first-page":"495","article-title":"Learning privacy-enhancing face representations through feature disentanglement","author":"bortolato","year":"2020","journal-title":"Proc 15th IEEE Int Conf Automat Face Gesture Recognit (FG)"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.2994960"},{"key":"ref21","first-page":"1","article-title":"Privacy evaluation protocols for the evaluation of soft-biometric privacy-enhancing technologies","author":"terh\u00f6rst","year":"2020","journal-title":"Proc Int Conf Biometrics Special Interest Group (BIOSIG)"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2013.22"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.6028\/NIST.IR.8053"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-41512-8_3"},{"key":"ref278","year":"1988","journal-title":"Protocol to the Convention for the Protection of Human Rights and Fundamental Freedoms (European Convention on Human Rights) as Amended by Protocol no 11"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2015.01.041"},{"key":"ref279","year":"2018","journal-title":"Guide on Article 8 of the European Convention on Human Rights"},{"key":"ref293","year":"2015"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1007\/978-94-007-5170-5_1"},{"key":"ref292","year":"2017"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2010.2097252"},{"key":"ref295","year":"1950","journal-title":"European Convention for the Protection of Human Rights and Fundamental Freedoms as Amended by Protocols no 11 and 14"},{"key":"ref294","year":"2011"},{"key":"ref297","year":"2018","journal-title":"What is GDPR Special Category Data?"},{"key":"ref296","year":"2020","journal-title":"Biometric Data and Data Protection Regulations (GDPR and CCPA)"},{"key":"ref299","doi-asserted-by":"publisher","DOI":"10.1145\/3168389"},{"key":"ref298","article-title":"CCPA and GDPR comparison chart","author":"jehl","year":"2019"},{"key":"ref154","doi-asserted-by":"publisher","DOI":"10.1109\/AFGR.2002.1004130"},{"key":"ref153","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2016.2555792"},{"key":"ref156","doi-asserted-by":"publisher","DOI":"10.1109\/GlobalSIP.2017.8308673"},{"key":"ref155","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2009.5459250"},{"key":"ref150","first-page":"1","article-title":"Privacy protection filter using stegoscrambling in video surveillance","author":"ruchaud","year":"2015","journal-title":"Proc MediaEval"},{"key":"ref152","doi-asserted-by":"publisher","DOI":"10.1109\/TFUZZ.2015.2486803"},{"key":"ref291","doi-asserted-by":"publisher","DOI":"10.2307\/j.ctvjghvnn"},{"key":"ref151","doi-asserted-by":"publisher","DOI":"10.1117\/1.JEI.26.2.023015"},{"key":"ref290","year":"2018"},{"key":"ref146","doi-asserted-by":"publisher","DOI":"10.1109\/APSIPA.2013.6694254"},{"key":"ref147","doi-asserted-by":"publisher","DOI":"10.1109\/WIFS.2014.7084305"},{"key":"ref148","doi-asserted-by":"publisher","DOI":"10.1109\/ICIP.2014.7026220"},{"key":"ref149","doi-asserted-by":"publisher","DOI":"10.1109\/ACV.1994.341300"},{"key":"ref289","year":"2019"},{"key":"ref59","first-page":"85","article-title":"How are attributes expressed in face DCNNs?","author":"dhar","year":"2020","journal-title":"Proc 15th IEEE Int Conf Autom Face Gesture Recognit (FG)"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2015.2480381"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.2307\/1229517"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1007\/s11623-009-0089-0"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.2307\/40041279"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/ICPR.2014.715"},{"key":"ref53","first-page":"1","article-title":"Cancelable biometrics: A comprehensive survey","volume":"53","author":"kumar","year":"2019","journal-title":"Artif Intell Rev"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1117\/12.852280"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/ICB.2013.6613019"},{"key":"ref167","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW.2012.6239234"},{"key":"ref166","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01270-0_37"},{"key":"ref165","first-page":"1","article-title":"The MUCT landmarked face database","volume":"201","author":"milborrow","year":"2010","journal-title":"Pattern Recognit Assoc South Africa"},{"key":"ref164","doi-asserted-by":"publisher","DOI":"10.1007\/11787006_1"},{"key":"ref163","doi-asserted-by":"publisher","DOI":"10.1109\/ICME.2019.00140"},{"key":"ref162","article-title":"MOTChallenge 2015: Towards a benchmark for multi-target tracking","author":"leal-taix\u00e9","year":"2015","journal-title":"arXiv 1504 01942 [cs]"},{"key":"ref161","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-03338-5_14"},{"key":"ref160","doi-asserted-by":"publisher","DOI":"10.1109\/MOBISECSERV.2018.8311446"},{"key":"ref4","year":"0","journal-title":"Biometric Data and Data Protection Regulations (GDPR and CCPA)"},{"key":"ref3","author":"heilweil","year":"2020","journal-title":"Big Tech Companies Back Away From Selling Facial Recognition to Police That’s Progress"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/AVSS.2010.38"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2007.383413"},{"key":"ref159","doi-asserted-by":"publisher","DOI":"10.1109\/NTMS.2018.8328726"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1016\/j.image.2016.05.020"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/FG.2015.7285017"},{"key":"ref49","article-title":"What’s ‘privacy","volume":"28","author":"clarke","year":"2006","journal-title":"Proc Austral Reform Commission Workshop (ALRCW)"},{"key":"ref157","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-44887-X_112"},{"key":"ref158","doi-asserted-by":"publisher","DOI":"10.5244\/C.29.41"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1049\/iet-spr.2017.0049"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2020.3015420"},{"key":"ref45","first-page":"682","article-title":"Privacy of facial soft biometrics: Suppressing gender but retaining identity","author":"othman","year":"2014","journal-title":"Proc Eur Conf Comput Vis Workshops (ECCVW)"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1145\/293411.293475"},{"key":"ref47","first-page":"1","article-title":"Controllable face privacy","author":"sim","year":"2015","journal-title":"Proc 11th IEEE Int Conf Workshops Automat Face Gesture Recognit (FG)"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1016\/j.patrec.2006.02.018"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/ICARCV.2008.4795894"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/BTAS.2017.8272743"},{"key":"ref43","first-page":"176","article-title":"Robustness analysis of face obscuration","author":"hao","year":"2020","journal-title":"Proc 15th IEEE Int Conf Autom Face Gesture Recognit (FG)"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-95729-6_10"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1109\/ICIP.2019.8803803"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01246-5_38"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1007\/s10489-019-01432-5"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.1109\/FG.2015.7285019"},{"key":"ref77","doi-asserted-by":"publisher","DOI":"10.1145\/1217299.1217302"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-29726-8_15"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1109\/ICETCCT.2017.8280304"},{"key":"ref312","doi-asserted-by":"publisher","DOI":"10.1117\/12.2027040"},{"key":"ref78","doi-asserted-by":"publisher","DOI":"10.1109\/ICDE.2007.367856"},{"key":"ref311","doi-asserted-by":"publisher","DOI":"10.1038\/d41586-020-03187-3"},{"key":"ref79","first-page":"65","article-title":"P-sensitive K-anonymity with generalization constraints","volume":"3","author":"campan","year":"2010","journal-title":"Trans Data Privacy"},{"key":"ref310","article-title":"Exploiting quality and texture features to estimate age and gender from fingerprints","volume":"9075","author":"marasco","year":"2014","journal-title":"Proc SPIE"},{"key":"ref60","first-page":"1","article-title":"Beyond identity: What information is stored in biometric face templates?","author":"terhorst","year":"2020","journal-title":"Proc IEEE Int Joint Conf Biometrics (IJCB)"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1109\/IROS.2018.8594493"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.3390\/e20010060"},{"key":"ref305","first-page":"77","article-title":"Gender shades: Intersectional accuracy disparities in commercial gender classification","author":"buolamwini","year":"2018","journal-title":"Proc Conf Fairness Accountability Transparency"},{"key":"ref63","first-page":"1","article-title":"Privacy in mini-drone based video surveillance","author":"bonetto","year":"2015","journal-title":"Proc 11th IEEE Int Conf Workshops Automat Gesture Recognit (FG)"},{"key":"ref304","first-page":"330","article-title":"Jointly de-biasing face recognition and demographic attribute estimation","author":"gong","year":"2020","journal-title":"Proc Eur Conf Comput Vis (ECCV)"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW.2006.125"},{"key":"ref307","doi-asserted-by":"publisher","DOI":"10.1109\/THS.2011.6107909"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-66429-3_65"},{"key":"ref306","author":"buolamwini","year":"2019","journal-title":"Response Racial and Gender Bias in Amazon Rekognition—Commercial AI System for Analyzing Faces"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1109\/ICB45273.2019.8987331"},{"key":"ref301","first-page":"1","article-title":"Characterizing the variability in face recognition accuracy relative to race","author":"vangara","year":"2019","journal-title":"Proc IEEE\/CVF Conf Comput Vis Pattern Recognit Workshops (CVPRW)"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1109\/TMM.2017.2728479"},{"key":"ref300","doi-asserted-by":"publisher","DOI":"10.1109\/ICB45273.2019.8987307"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00947"},{"key":"ref303","doi-asserted-by":"publisher","DOI":"10.1109\/WACVW50321.2020.9096947"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2020.3024026"},{"key":"ref302","doi-asserted-by":"publisher","DOI":"10.1109\/TTS.2020.2974996"},{"key":"ref309","first-page":"3460","article-title":"Real-time gait-based age estimation and gender classification from a single image","author":"xu","year":"2021","journal-title":"Proc IEEE\/CVF Winter Conf Appl Comput Vis (WACV)"},{"key":"ref308","doi-asserted-by":"publisher","DOI":"10.1109\/WACV.2019.00101"},{"key":"ref197","doi-asserted-by":"publisher","DOI":"10.1109\/ICME.2005.1521424"},{"key":"ref198","article-title":"The Japanese female facial expression (JAFFE) database, version 1","author":"lyons","year":"1998"},{"key":"ref199","article-title":"The IMM face database—An annotated dataset of 240 face images","author":"nordstr\u00f8m","year":"2004"},{"key":"ref193","doi-asserted-by":"publisher","DOI":"10.1109\/ICCVW.2013.54"},{"key":"ref194","doi-asserted-by":"publisher","DOI":"10.1016\/j.imavis.2009.08.002"},{"key":"ref195","doi-asserted-by":"publisher","DOI":"10.1016\/j.imavis.2009.11.005"},{"key":"ref196","author":"weber","year":"1999","journal-title":"Frontal Faces Database"},{"key":"ref95","article-title":"Privacy of online handwriting biometrics related to biomedical analysis","author":"faundez-zanuy","year":"2017","journal-title":"IET in User-Centric Privacy and Security in Biometrics"},{"key":"ref190","doi-asserted-by":"publisher","DOI":"10.32604\/cmc.2018.03675"},{"key":"ref94","doi-asserted-by":"publisher","DOI":"10.1109\/TCSVT.2011.2105551"},{"key":"ref191","first-page":"1246","article-title":"An approach to the de-identification of faces in different poses","author":"samar\u017eija","year":"2014","journal-title":"Proc 37th Int Conv Inf Commun Technol Electron Microelectron (MIPRO)"},{"key":"ref93","first-page":"1288","article-title":"An experimental tattoo de-identification system for privacy protection in still images","author":"mar?eti?","year":"2014","journal-title":"Proc Int Conv Inf Commun Technol Electron Microelectron (MIPRO)"},{"key":"ref192","doi-asserted-by":"publisher","DOI":"10.1049\/iet-spr.2016.0761"},{"key":"ref92","doi-asserted-by":"publisher","DOI":"10.1109\/FG.2015.7285021"},{"key":"ref91","doi-asserted-by":"publisher","DOI":"10.1109\/ASRU.2009.5373356"},{"key":"ref90","first-page":"1","article-title":"Privacy protection for life-log system","author":"chaudhari","year":"2007","journal-title":"Proc Workshop Signal Process Appl Public Secur Forensics (SAFE)"},{"key":"ref98","doi-asserted-by":"publisher","DOI":"10.1109\/IROS.2007.4399122"},{"key":"ref99","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-84882-301-3_7"},{"key":"ref96","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-77409-9_14"},{"key":"ref97","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-84882-301-3_9"},{"key":"ref82","doi-asserted-by":"crossref","first-page":"211","DOI":"10.1561\/0400000042","article-title":"The algorithmic foundations of differential privacy","volume":"9","author":"dwork","year":"2014","journal-title":"Found Trends Theor Comput Sci"},{"key":"ref81","article-title":"Mitigating soft-biometric driven bias and privacy concerns in face recognition systems","author":"terh\u00f6rst","year":"2021"},{"key":"ref84","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-79228-4_1"},{"key":"ref83","doi-asserted-by":"publisher","DOI":"10.1145\/1559845.1559850"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.1109\/NCVPRIPG.2011.48"},{"key":"ref89","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP.2012.6288261"},{"key":"ref85","doi-asserted-by":"publisher","DOI":"10.1145\/773153.773173"},{"key":"ref86","doi-asserted-by":"publisher","DOI":"10.1109\/I-SPAN.2018.00020"},{"key":"ref87","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2012.2234740"},{"key":"ref88","doi-asserted-by":"publisher","DOI":"10.1109\/MIPRO.2014.6859765"},{"key":"ref200","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2013.23"},{"key":"ref101","first-page":"1","article-title":"OpenFace: An open source facial behavior analysis toolkit","author":"baltru\u0161aitis","year":"2016","journal-title":"Proc Winter Conf Appl Comput Vis (WACV)"},{"key":"ref100","doi-asserted-by":"publisher","DOI":"10.1145\/3083187.3083192"},{"key":"ref209","article-title":"Human action localization with sparse spatial supervision","author":"weinzaepfel","year":"2016","journal-title":"arXiv 1605 05197"},{"key":"ref203","doi-asserted-by":"publisher","DOI":"10.1109\/FG.2011.5771462"},{"key":"ref204","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW.2010.5543262"},{"key":"ref201","article-title":"HoneyFaces: Increasing the security and privacy of authentication using synthetic facial images","author":"ohana","year":"2016","journal-title":"arXiv 1611 03811"},{"key":"ref202","first-page":"211","article-title":"A 3D facial expression database for facial behavior research","author":"yin","year":"2006","journal-title":"Proc 7th Int Conf Automatic Face and Gesture Recognition"},{"key":"ref207","doi-asserted-by":"publisher","DOI":"10.1049\/iet-spr.2017.0048"},{"key":"ref208","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW.2011.5981881"},{"key":"ref205","doi-asserted-by":"publisher","DOI":"10.1109\/GlobalSIP.2015.7418263"},{"key":"ref206","doi-asserted-by":"publisher","DOI":"10.1109\/ICITST.2016.7856669"},{"key":"ref211","doi-asserted-by":"publisher","DOI":"10.23919\/ChiCC.2018.8483889"},{"key":"ref210","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2013.396"},{"key":"ref212","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW.2018.00207"},{"key":"ref213","first-page":"136","article-title":"Modeling stylized character expressions via deep learning","author":"aneja","year":"2016","journal-title":"Proc Asian Conf Comput Vis (ACCV)"},{"key":"ref214","first-page":"1","article-title":"The mug facial expression database","author":"aifanti","year":"2010","journal-title":"Proc 8th Int Workshop Image Analy Multimedia Interactive Services (WIAMIS)"},{"key":"ref215","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00530"},{"key":"ref216","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01246-5_34"},{"key":"ref217","article-title":"Privacy-Protective-GAN for face de-identification","author":"wu","year":"2018","journal-title":"arXiv 1806 08906"},{"key":"ref218","doi-asserted-by":"publisher","DOI":"10.1109\/AVSS.2019.8909866"},{"key":"ref219","doi-asserted-by":"publisher","DOI":"10.1145\/3335203.3335719"},{"key":"ref220","article-title":"AnonymousNet: Natural face de-identification with measurable privacy","author":"li","year":"2019","journal-title":"arXiv 1904 12620"},{"key":"ref222","doi-asserted-by":"publisher","DOI":"10.1109\/ICIP.2014.7025068"},{"key":"ref221","article-title":"A utility-preserving GAN for face obscuration","author":"hao","year":"2019","journal-title":"arXiv 1906 11979"},{"key":"ref229","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-46466-4_52"},{"key":"ref228","article-title":"The UU-Net: Reversible face de-identification for visual surveillance video footage","author":"proen\u00e7a","year":"2020","journal-title":"arXiv 2007 04316"},{"key":"ref227","doi-asserted-by":"publisher","DOI":"10.3390\/app10031120"},{"key":"ref226","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00813"},{"key":"ref225","first-page":"5447","article-title":"CiaGAN: Conditional identity anonymization generative adversarial networks","author":"maximov","year":"2020","journal-title":"Proc IEEE\/CVF Conf Comput Vis Pattern Recognit (CVPR)"},{"key":"ref224","first-page":"2","article-title":"The Karolinska directed emotional faces (KDEF)","volume":"91","author":"lundqvist","year":"1998","journal-title":"CD ROM Dep Clin Neurosci Psychol Sect Karolinska Institutet"},{"key":"ref223","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.596"},{"key":"ref127","first-page":"1","article-title":"The behave video dataset: Ground truthed video for multi-person","volume":"2010","author":"blunsden","year":"2010","journal-title":"Ann BMVA"},{"key":"ref126","article-title":"Labeled faces in the wild: A database for studying face recognition in unconstrained environments","author":"huang","year":"2007"},{"key":"ref125","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2015.7299113"},{"key":"ref124","doi-asserted-by":"publisher","DOI":"10.1109\/MMSP.2018.8547144"},{"key":"ref129","doi-asserted-by":"publisher","DOI":"10.1117\/12.2030974"},{"key":"ref128","doi-asserted-by":"publisher","DOI":"10.1109\/PETS-WINTER.2009.5399556"},{"key":"ref130","doi-asserted-by":"publisher","DOI":"10.1145\/2750675.2750679"},{"key":"ref133","first-page":"1","article-title":"Robust human face hiding ensuring privacy","author":"mart\u00ednez-ponte","year":"2005","journal-title":"Proc 8th Int Workshop Image Analy Multimedia Interactive Services (WIAMIS)"},{"key":"ref134","first-page":"334","article-title":"Advanced video surveillance with pan tilt zoom cameras","author":"cucchiara","year":"2006","journal-title":"Proc 6th IEEE Int Workshop Vis Surveill (IWVS)"},{"key":"ref131","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2014.2359646"},{"key":"ref132","doi-asserted-by":"publisher","DOI":"10.1117\/12.564828"},{"key":"ref232","doi-asserted-by":"publisher","DOI":"10.1126\/science.1127647"},{"key":"ref233","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP.2013.6638964"},{"key":"ref230","article-title":"The P-DESTRE: A fully annotated dataset for pedestrian detection, tracking, re-identification and search from aerial devices","author":"kumar","year":"2020","journal-title":"arXiv 2004 02782"},{"key":"ref231","first-page":"2672","article-title":"Generative adversarial nets","author":"goodfellow","year":"2014","journal-title":"Proc Adv Neural Inf Process Syst"},{"key":"ref239","doi-asserted-by":"publisher","DOI":"10.1109\/T-AFFC.2012.33"},{"key":"ref238","first-page":"229","article-title":"Efficient privacy-preserving face recognition","author":"sadeghi","year":"2009","journal-title":"Proc Int Conf Inf Secur Cryptol (ICISC)"},{"key":"ref235","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.282"},{"key":"ref234","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2003.1227983"},{"key":"ref237","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-03168-7_14"},{"key":"ref236","article-title":"Learning anonymized representations with adversarial neural networks","author":"feutry","year":"2018","journal-title":"arXiv 1802 09386"},{"key":"ref136","doi-asserted-by":"publisher","DOI":"10.1109\/ICIP.2008.4712098"},{"key":"ref135","doi-asserted-by":"publisher","DOI":"10.1109\/CVIIE.2005.16"},{"key":"ref138","doi-asserted-by":"publisher","DOI":"10.1109\/FSKD.2009.391"},{"key":"ref137","author":"montgomery","year":"1994","journal-title":"Xiph org video test media (derf’s collection) the xiph open source community"},{"key":"ref139","doi-asserted-by":"publisher","DOI":"10.1049\/el.2010.2068"},{"key":"ref140","doi-asserted-by":"publisher","DOI":"10.1109\/ICCVW.2011.6130490"},{"key":"ref141","doi-asserted-by":"publisher","DOI":"10.1007\/s00530-011-0246-9"},{"key":"ref142","doi-asserted-by":"publisher","DOI":"10.1109\/ICDSP.2013.6622791"},{"key":"ref143","doi-asserted-by":"publisher","DOI":"10.1109\/34.598228"},{"key":"ref144","doi-asserted-by":"publisher","DOI":"10.1109\/34.879790"},{"key":"ref2","author":"alba","year":"0","journal-title":"A C L U Accuses Clearview AI of Privacy ‘Nightmare Scenario’"},{"key":"ref145","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP.2013.6638201"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.29012\/jpc.v6i2.638"},{"key":"ref241","doi-asserted-by":"publisher","DOI":"10.1007\/s00500-015-1759-5"},{"key":"ref242","author":"li","year":"2012","journal-title":"Deterministic fully homomorphic encryptions for privacy preserving cloud computing"},{"key":"ref243","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2017.2737544"},{"key":"ref244","doi-asserted-by":"publisher","DOI":"10.1155\/2014\/468176"},{"key":"ref240","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2013.2262273"},{"key":"ref248","article-title":"Learning face representation from scratch","author":"yi","year":"2014","journal-title":"arXiv 1411 7923"},{"key":"ref247","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW.2017.87"},{"key":"ref246","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2015.7298803"},{"key":"ref245","first-page":"1","article-title":"Secure face matching using fully homomorphic encryption","author":"boddeti","year":"2018","journal-title":"Proc IEEE 9th Int Conf Biometrics Theory Appl Syst (BTAS)"},{"key":"ref249","first-page":"1","article-title":"On the application of homomorphic encryption to face identification","author":"drozdowski","year":"2019","journal-title":"Proc Int Conf Biometrics Special Interest Group (BIOSIG)"},{"key":"ref109","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW.2017.177"},{"key":"ref108","doi-asserted-by":"publisher","DOI":"10.1109\/ICDSP.2013.6622808"},{"key":"ref107","doi-asserted-by":"publisher","DOI":"10.1109\/AVSS.2014.6918642"},{"key":"ref106","doi-asserted-by":"publisher","DOI":"10.1007\/s11042-016-4337-7"},{"key":"ref105","doi-asserted-by":"publisher","DOI":"10.1117\/12.2027040"},{"key":"ref104","doi-asserted-by":"publisher","DOI":"10.5121\/sipij.2013.4602"},{"key":"ref103","doi-asserted-by":"publisher","DOI":"10.1109\/ICIP.2015.7351547"},{"key":"ref102","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW.2017.181"},{"key":"ref111","doi-asserted-by":"publisher","DOI":"10.1109\/AVSS.2013.6636641"},{"key":"ref112","doi-asserted-by":"publisher","DOI":"10.1145\/289444.289450"},{"key":"ref110","doi-asserted-by":"publisher","DOI":"10.1109\/IIH-MSP.2014.122"},{"key":"ref250","first-page":"1","article-title":"Efficiency analysis of post-quantum-secure face template protection schemes based on homomorphic encryption","author":"kolberg","year":"2020","journal-title":"Proc Int Conf Biometrics Special Interest Group (BIOSIG)"},{"key":"ref251","first-page":"1","article-title":"Privacy enhanced cloud-based facial recognition","volume":"155","author":"yang","year":"2021","journal-title":"Neural Process Lett"},{"key":"ref254","doi-asserted-by":"publisher","DOI":"10.1007\/s12083-021-01076-8"},{"key":"ref255","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-48910-X_16"},{"key":"ref252","article-title":"Tutorial on variational autoencoders","author":"doersch","year":"2016","journal-title":"arXiv 1606 05908"},{"key":"ref253","article-title":"Unsupervised enhancement of soft-biometric privacy with negative face recognition","author":"terh\u00f6rst","year":"2020","journal-title":"arXiv 2002 09181"},{"key":"ref257","doi-asserted-by":"publisher","DOI":"10.1109\/SFCS.1986.25"},{"key":"ref256","doi-asserted-by":"publisher","DOI":"10.1504\/IJACT.2009.028031"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1007\/11767831_15"},{"key":"ref259","article-title":"A fully homomorphic encryption scheme","author":"gentry","year":"2009"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/BTAS.2018.8698605"},{"key":"ref258","first-page":"144","article-title":"Somewhat practical fully homomorphic encryption","volume":"2012","author":"fan","year":"2012","journal-title":"IACR Cryptol ePrint Arch"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2924619"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2018\/91"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1142\/S0218488502001648"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2005.32"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2015.2427849"},{"key":"ref118","doi-asserted-by":"publisher","DOI":"10.1016\/j.patrec.2011.01.004"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2015.2434151"},{"key":"ref117","doi-asserted-by":"publisher","DOI":"10.1016\/j.sigpro.2010.08.010"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1186\/1687-417X-2011-3"},{"key":"ref19","article-title":"PrivacyProber: Assessment and detection of soft–biometric privacy–enhancing techniques","author":"rot","year":"2021"},{"key":"ref119","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2012.2224866"},{"key":"ref114","doi-asserted-by":"publisher","DOI":"10.1109\/ICIP.2015.7351631"},{"key":"ref113","doi-asserted-by":"publisher","DOI":"10.1145\/358916.358935"},{"key":"ref116","doi-asserted-by":"publisher","DOI":"10.1109\/FG.2011.5771368"},{"key":"ref115","doi-asserted-by":"publisher","DOI":"10.1016\/j.patrec.2008.03.017"},{"key":"ref120","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2944861"},{"key":"ref121","doi-asserted-by":"publisher","DOI":"10.1109\/AVSS.2016.7738067"},{"key":"ref122","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-12297-2_26"},{"key":"ref123","doi-asserted-by":"publisher","DOI":"10.1109\/MMSP.2012.6343472"},{"key":"ref260","first-page":"409","article-title":"Homomorphic encryption for arithmetic of approximate numbers","author":"cheon","year":"2017","journal-title":"Proc Int Conf Theory Appl Cryptol Inf Secur (ASIACRYPT)"},{"key":"ref261","doi-asserted-by":"publisher","DOI":"10.1007\/BFb0054868"},{"key":"ref262","doi-asserted-by":"publisher","DOI":"10.1145\/3214303"},{"key":"ref263","doi-asserted-by":"publisher","DOI":"10.1145\/3124441"},{"key":"ref264","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-45741-3_21"},{"key":"ref265","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-46487-9_2"},{"key":"ref266","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijinfomgt.2016.08.002"}],"container-title":["IEEE Transactions on Information Forensics and Security"],"original-title":[],"link":[{"URL":"https:\/\/ieeexplore.ieee.org\/ielam\/10206\/9151439\/9481149-aam.pdf","content-type":"application\/pdf","content-version":"am","intended-application":"syndication"},{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/10206\/9151439\/09481149.pdf?arnumber=9481149","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,4,8]],"date-time":"2022-04-08T18:51:49Z","timestamp":1649443909000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9481149\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021]]},"references-count":312,"URL":"https:\/\/doi.org\/10.1109\/tifs.2021.3096024","relation":{},"ISSN":["1556-6013","1556-6021"],"issn-type":[{"value":"1556-6013","type":"print"},{"value":"1556-6021","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021]]}}}