Modern face recognition systems utilize deep neural networks to extract
salient features from a face. These features denote embeddings in latent space
and are often stored as templates in a face recognition system. These
embeddings are susceptible to data leakage and, in some cases, can even be used
to reconstruct the original face image. To prevent compromising identities,
template protection schemes are commonly employed. However, these schemes may
still not prevent the leakage of soft biometric information such as age, gender
and race. To alleviate this issue, we propose a novel technique that combines
Fully Homomorphic Encryption (FHE) with an existing template protection scheme
known as PolyProtect. We show that the embeddings can be compressed and
encrypted using FHE and transformed into a secure PolyProtect template using
polynomial transformation, for additional protection. We demonstrate the
efficacy of the proposed approach through extensive experiments on multiple
datasets. Our proposed approach ensures irreversibility and unlinkability,
effectively preventing the leakage of soft biometric attributes from face
embeddings without compromising recognition accuracy.

我们提出了一种新颖的技术，结合了全同态加密（FHE）和现有的模板保护方案 PolyProtect，通过多项式变换将嵌入式压缩加密，进一步保护密集的 PolyProtect 模板，确保面部嵌入的不可逆性和不可关联性，有效地防止了从面部嵌入中泄露软生物识别属性而不损害识别准确性。