MicPro: Microphone-based Voice Privacy Protection
Shilin Xiao, Xiaoyu Ji, Chen Yan, Zhicong Zheng, Wenyuan Xu
Abstract
Hundreds of hours of audios are recorded and transmitted over the Internet for voice interactions such as virtual calls or speech recognitions. As these recordings are uploaded, embedded biometric information, i.e., voiceprints, is unnecessarily exposed. This paper proposes the first privacy-enhanced microphone module (i.e., MicPro) that can produce anonymous audio recordings with biometric information suppressed while preserving speech quality for human perception or linguistic content for speech recognition. Limited by the hardware capabilities of microphone modules, previous works that modify recording at the software level are inapplicable. To achieve anonymity in this scenario, MicPro transforms formants, which are distinct for each person due to the unique physiological structure of the vocal organs, and formant transformations are done by modifying the linear spectrum frequencies (LSFs) provided by a popular codec (i.e., CELP) in low-latency communications. To strike a balance between anonymity and usability, we use a multi-objective genetic algorithm (NSGA-II) to optimize the transformation coefficients. We implement MicPro on an off-the-shelf microphone module and evaluate the performance of MicPro on several ASV systems, ASR systems, corpora, and in real-world setup. Our experiments show that for the state-of-the-art ASV systems, MicPro outperforms existing software-based strategies that utilize signal processing (SP) techniques, achieving an EER that is 5 ∼ 10% higher and MMR that is 20% higher than existing works while maintaining a comparable level of usability. CCS CONCEPTS • Security and privacy → Privacy protections; Usability in security and privacy.
Ask about this paper
Your agent reads all of it.
Lune indexed this paper to the last equation, along with the top-tier papers that cite it. Ask a question and the answer quotes them.
Cited by top-tier papers2
- SafeEar: Content Privacy-Preserving Audio Deepfake DetectionXinfeng Li, Kai Li, Yifan Zheng, Chen Yan et al.CCS 2024 · 26 citations
- For Human Ears Only: Preventing Automated Monitoring on Voice DataIrtaza Shahid, Nirupam RoyUSENIX Security 2025
Builds on7
- wav2vec 2.0: A Framework for Self-Supervised Learning of Speech RepresentationsAlexei Baevski, Yuhao Zhou, Abdelrahman Mohamed, Michael AuliNeurIPS 2020 · 9,451 citations
- Who is Real Bob? Adversarial Attacks on Speaker Recognition SystemsGuangke Chen, Sen Chen, Lingling Fan, Xiaoning Du et al.S&P 2021 · 239 citations
- Enabling Fast and Universal Audio Adversarial Attack Using Generative ModelYi Xie, Zhuohang Li, Cong Shi, Jian Liu et al.AAAI 2021 · 77 citations
- Voiceprint Mimicry Attack Towards Speaker Verification System in Smart HomeLei Zhang, Yan Meng, Jiahao Yu, Chong Xiang et al.INFOCOM 2020 · 49 citations
- Thwarting Unauthorized Voice Eavesdropping via Touch Sensing in Mobile SystemsWenbin Huang, Wenjuan Tang, Kuan Zhang, Haojin Zhu et al.INFOCOM 2022 · 14 citations
Related papers
- Preech: A System for Privacy-Preserving Speech TranscriptionShimaa Ahmed, Amrita Roy Chowdhury, Kassem Fawaz, Parmesh RamanathanUSENIX Security 2020
- V-Cloak: Intelligibility-, Naturalness- & Timbre-Preserving Real-Time Voice AnonymizationJiangyi Deng, Fei Teng, Yanjiao Chen, Xiaofu Chen et al.USENIX Security 2023
- SafeSpeaker: Voice Obfuscation for Resource-Constrained IoT DevicesCameron Haire, Yasha Iravantchi, Kang G. Shin, Alanson P. SampleUbiComp 2026 · 1 citation
- VoiceCloak: Adversarial Example Enabled Voice De-Identification with Balanced Privacy and UtilityMeng Chen, Li Lu, Junhao Wang, Jiadi Yu et al.UbiComp 2023 · 21 citations
- CamPro: Camera-based Anti-Facial RecognitionWenjun Zhu, Yuan Sun, Jiani Liu, Yushi Cheng et al.NDSS 2024
