Adversary-Guided Motion Retargeting for Skeleton Anonymization
Thomas Carr, Depeng Xu, Aidong Lu
TL;DR
The paper tackles privacy risks in skeleton-based motion data by introducing PMR, a privacy-centric deep motion retargeting framework. PMR uses two encoders to separately capture motion and privacy information, a decoder to retarget motion onto a dummy skeleton, and embedding classifiers with a quality discriminator to balance utility and privacy. Through unpaired and paired training, including cross-reconstruction, triplet, latent-consistency, and end-effector losses, PMR achieves motion retargeting utility on par with state-of-the-art methods while substantially reducing privacy attack success. The results on NTU RGB+D 60 demonstrate effective disentanglement of motion and identity cues, offering a practical approach for privacy-preserving skeleton-based VR and analytics; future work may explore transformer-based architectures to further enhance representation learning and anonymization performance.
Abstract
Skeleton-based motion visualization is a rising field in computer vision, especially in the case of virtual reality (VR). With further advancements in human-pose estimation and skeleton extracting sensors, more and more applications that utilize skeleton data have come about. These skeletons may appear to be anonymous but they contain embedded personally identifiable information (PII). In this paper we present a new anonymization technique that is based on motion retargeting, utilizing adversary classifiers to further remove PII embedded in the skeleton. Motion retargeting is effective in anonymization as it transfers the movement of the user onto the a dummy skeleton. In doing so, any PII linked to the skeleton will be based on the dummy skeleton instead of the user we are protecting. We propose a Privacy-centric Deep Motion Retargeting model (PMR) which aims to further clear the retargeted skeleton of PII through adversarial learning. In our experiments, PMR achieves motion retargeting utility performance on par with state of the art models while also reducing the performance of privacy attacks.
