Privacy Disclosure of Similarity Rank in Speech and Language Processing

TL;DR

This paper introduces a method to quantify privacy risks in biometric identification by analyzing the information leaked through similarity ranks, revealing that even noisy measures can disclose sensitive identity details.

Contribution

It proposes a novel metric for measuring privacy disclosure via similarity rank distributions, applicable to speech and biometric data, enhancing privacy threat evaluation.

Findings

Speaker embeddings contain the most PII among features.

Privacy disclosure increases with test sample length.

The metric allows comparison of PII disclosure across features.

Abstract

Speaker, author, and other biometric identification applications often compare a sample's similarity to a database of templates to determine the identity. Given that data may be noisy and similarity measures can be inaccurate, such a comparison may not reliably identify the true identity as the most similar. Still, even the similarity rank based on an inaccurate similarity measure can disclose private information about the true identity. We propose a methodology for quantifying the privacy disclosure of such a similarity rank by estimating its probability distribution. It is based on determining the histogram of the similarity rank of the true speaker, or when data is scarce, modeling the histogram with the beta-binomial distribution. We express the disclosure in terms of entropy (bits), such that the disclosure from independent features are additive. Our experiments demonstrate that all tested speaker and author characterizations contain personally identifying information (PII) that can aid in identification, with embeddings from speaker recognition algorithms containing the most information, followed by phone embeddings, linguistic embeddings, and fundamental frequency. Our initial experiments show that the disclosure of PII increases with the length of test samples, but it is bounded by the length of database templates. The provided metric, similarity rank disclosure, provides a way to compare the disclosure of PII between biometric features and merge them to aid identification. It can thus aid in the holistic evaluation of threats to privacy in speech and other biometric technologies.