research-article

Public Access

Differential privacy for eye-tracking data

Authors:

Andrew Duchowski,

Reynold Bailey,

Kenneth Holmqvist,

Eakta JainAuthors Info & Claims

ETRA '19: Proceedings of the 11th ACM Symposium on Eye Tracking Research & Applications

Article No.: 28, Pages 1 - 10

https://doi.org/10.1145/3314111.3319823

Published: 25 June 2019 Publication History

Abstract

As large eye-tracking datasets are created, data privacy is a pressing concern for the eye-tracking community. De-identifying data does not guarantee privacy because multiple datasets can be linked for inferences. A common belief is that aggregating individuals' data into composite representations such as heatmaps protects the individual. However, we analytically examine the privacy of (noise-free) heatmaps and show that they do not guarantee privacy. We further propose two noise mechanisms that guarantee privacy and analyze their privacy-utility tradeoff. Analysis reveals that our Gaussian noise mechanism is an elegant solution to preserve privacy for heatmaps. Our results have implications for interdisciplinary research to create differentially private mechanisms for eye tracking.

Supplementary Material

ZIP File (a28-liu.zip)

Supplemental files.

Download
490.96 KB

References

[1]

(2018). Eu general data protection regulation. https://eugdpr.org.

[2]

Abadi, M., Chu, A., Goodfellow, I., McMahan, H. B., Mironov, I., Talwar, K., and Zhang, L. (2016). Deep learning with differential privacy. In Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security, pages 308--318. ACM.

Digital Library

[3]

Chuang, L., Duchowski, A., Qvarfordt, P., and Weiskopf, D., editors (2018). Ubiquitous Gaze Sensing and Interaction, volume 8 of Dagstuhl Reports, Schloss Dagstuhl-Leibniz-Zentrum fü Informatik, Germany. Dagstuhl Publishing.

[4]

Duchowski, A. T. (2018). Gaze-based interaction: A 30 year retrospective. Computers & Graphics, pages -. Special Section on Serious Games and Virtual Environments.

[5]

Duchowski, A. T., Price, M. M., Meyer, M., and Orero, P. (2012). Aggregate gaze visualization with real-time heatmaps. In Proceedings of the Symposium on Eye Tracking Research and Applications, pages 13--20. ACM.

Digital Library

[6]

Dwork, C. (2008). Differential privacy: A survey of results. In International Conference on Theory and Applications of Models of Computation, pages 1--19. Springer.

Digital Library

[7]

Dwork, C. (2011). A firm foundation for private data analysis. Communications of ACM, 54(1):86--95.

Digital Library

[8]

Dwork, C., Roth, A., et al. (2014). The algorithmic foundations of differential privacy. Foundations and Trends® in Theoretical Computer Science, 9(3--4):211--407.

Digital Library

[9]

Elias, G., Sherwin, G., and Wise, J. (1984). Eye movements while viewing NTSC format television. Technical report, SMPTE Psychophysics Subcommittee.

[10]

Fan, L. and Xiong, L. (2014). An adaptive approach to real-time aggregate monitoring with differential privacy. IEEE Transactions on knowledge and data engineering, 26(9):2094--2106.

[11]

Farid, H. and Bravo, M. J. (2012). Perceptual discrimination of computer generated and photographic faces. Digital Investigation, 8(3--4):226--235.

[12]

Graham, J. (2018). Is apple really better about privacy? here's what we found out. https://www.usatoday.com/story/tech/talkingtech/2018/04/17/apple-make-simpler-download-your-privacy-data-year/521786002/.

[13]

Holland, C. and Komogortsev, O. V. (2011). Biometric identification via eye movement scanpaths in reading. In Biometrics (IJCB), 2011 International Joint Conference on, pages 1--8. IEEE.

Digital Library

[14]

Jarodzka, H., Holmqvist, K., and Gruber, H. (2017). Eye tracking in educational science: Theoretical frameworks and research agendas. Journal of Eye Movement Research, 10(1).

[15]

Ji, Z., Lipton, Z. C., and Elkan, C. (2014). Differential privacy and machine learning: a survey and review. arXiv preprint arXiv:1412.7584.

[16]

Khamis, M., Alt, F., and Bulling, A. (2018). The past, present, and future of gaze-enabled handheld mobile devices: Survey and lessons learned. In Proceedings of the 20th International Conference on Human-Computer Interaction with Mobile Devices and Services (MobileHCI), pages 38:1--38:17.

Digital Library

[17]

Komogortsev, O. V., Jayarathna, S., Aragon, C. R., and Mahmoud, M. (2010). Biometric identification via an oculomotor plant mathematical model. In Proceedings of the 2010 Symposium on Eye-Tracking Research & Applications, pages 57--60. ACM.

Digital Library

[18]

Leigh, R. J. and Zee, D. S. (2015). The neurology of eye movements. Oxford University Press, USA.

[19]

Liebling, D. J. and Preibusch, S. (2014). Privacy considerations for a pervasive eye tracking world. In Proceedings of the 2014 ACM International Joint Conference on Pervasive and Ubiquitous Computing: Adjunct Publication, pages 1169--1177. ACM.

Digital Library

[20]

Ling, R., Mardanbeigi, D., and Hansen, D. W. (2014). Synergies between head-mounted displays and headmounted eye tracking: The trajectory of development and its social consequences. In Living inside social mobile information, pages 131--156, 2251 Arbor Blvd. Dayton, OH 45439, USA.

[21]

Mader, B., Banks, M. S., and Farid, H. (2017). Identifying computer-generated portraits: The importance of training and incentives. Perception, 46(9):1062--1076.

[22]

Mital, P. K., Smith, T. J., Hill, R. L., and Henderson, J. M. (2011). Clustering of Gaze During Dynamic Scene Viewing is Predicted by Motion. Cognitive Computation, 3:5--24.

[23]

Nissim, K., Steinke, T., Wood, A., Altman, M., Bembenek, A., Bun, M., Gaboardi, M., OâĂ&Zacute;Brien, D. R., and Vadhan, S. (2017). Differential privacy: A primer for a nontechnical audience. Working Group Privacy Tools Sharing Res. Data, Harvard Univ., Boston, MA, USA, Tech. Rep. TR-2017-03.

[24]

Ohm, P. (2009). Broken promises of privacy: Responding to the surprising failure of anonymization. Ucla L. Rev., 57:1701.

[25]

Pomplun, M., Ritter, H., and Velichkovsky, B. (1996). Disambiguating complex visual information: Towards communication of personal views of a scene. Perception, 25(8):931--948.

[26]

Raiturkar, P., Farid, H., and Jain, E. (2018). Identifying computer-generated portraits: an eye tracking study. Technical report, University of Florida.

[27]

Rastogi, V. and Nath, S. (2010). Differentially private aggregation of distributed time-series with transformation and encryption. In Proceedings of the 2010 ACM SIGMOD International Conference on Management of data, pages 735--746. ACM.

Digital Library

[28]

van Gisbergen, M. S., van der Most, J., and Aelen, P. (2007). Visual Attention to Online Search Engine Results. Technical report, De Vos & Jansen in cooperation with Checkit. URL: http://www.iprospect.nl/wp-content/themes/iprospect/pdf/checkit/eyetracking_research.pdf (last accessed Dec. 2011).

[29]

Wooding, D. S. (2002). Fixation maps: quantifying eye-movement traces. In Proceedings of the Symposium on Eye tracking research & Applications (ETRA), pages 31--36. ACM.

Digital Library

Cited By

Elfares MReisert PHu ZTang WKüsters RBulling A(2024)PrivatEyes: Appearance-based Gaze Estimation Using Federated Secure Multi-Party ComputationProceedings of the ACM on Human-Computer Interaction10.1145/36556068:ETRA(1-23)Online publication date: 28-May-2024
https://dl.acm.org/doi/10.1145/3655606
Özdel SBozkir EKasneci E(2024)Privacy-preserving Scanpath Comparison for Pervasive Eye TrackingProceedings of the ACM on Human-Computer Interaction10.1145/36556058:ETRA(1-28)Online publication date: 28-May-2024
https://dl.acm.org/doi/10.1145/3655605
Wilson EIbragimov AProulx MTetali SButler KJain E(2024)Privacy-Preserving Gaze Data Streaming in Immersive Interactive Virtual Reality: Robustness and User ExperienceIEEE Transactions on Visualization and Computer Graphics10.1109/TVCG.2024.337203230:5(2257-2268)Online publication date: 8-Mar-2024
https://dl.acm.org/doi/10.1109/TVCG.2024.3372032
Show More Cited By

Index Terms

Differential privacy for eye-tracking data
1. Security and privacy
  1. Human and societal aspects of security and privacy
    1. Privacy protections

Recommendations

Efficient federated learning privacy preservation method with heterogeneous differential privacy
Abstract
Federated learning (FL) is a distributed machine learning method that effectively protects personal data. Many studies on federated learning assumed that all clients have consistent privacy parameters. However, in practice, different clients have ...
An Emerging Strategy for Privacy Preserving Databases: Differential Privacy
HCI for Cybersecurity, Privacy and Trust
Abstract
Data De-identification and Differential Privacy are two possible approaches for providing data security and user privacy. Data de-identification is the process where the personal identifiable information of individuals is extracted to create ...
A Novel Differential Privacy Approach that Enhances Classification Accuracy
C3S2E '16: Proceedings of the Ninth International C* Conference on Computer Science & Software Engineering

In the recent past, there has been a tremendous increase of large repositories of data, examples being in healthcare data, consumer data from retailers, and airline passenger data. These data are continually being shared with interested parties, either ...

Comments

Information & Contributors

Information

Published In

cover image ACM Conferences

ETRA '19: Proceedings of the 11th ACM Symposium on Eye Tracking Research & Applications

June 2019

623 pages

ISBN:9781450367097

DOI:10.1145/3314111

Conference Chairs:
Krzysztof Krejtz
SWPS University, Poland
,
Bonita Sharif
University of Nebraska-Lincoln

Copyright © 2019 ACM.

Permission to make digital or hard copies of all or part of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. Copyrights for components of this work owned by others than the author(s) must be honored. Abstracting with credit is permitted. To copy otherwise, or republish, to post on servers or to redistribute to lists, requires prior specific permission and/or a fee. Request permissions from [email protected].

Sponsors

Publisher

Association for Computing Machinery

New York, NY, United States

Publication History

Published: 25 June 2019

Permissions

Request permissions for this article.

Request Permissions

Check for updates

Author Tags

Qualifiers

Research-article

Funding Sources

National Science Foundation

Conference

ETRA '19

Sponsor:

ETRA '19: 2019 Symposium on Eye Tracking Research and Applications

June 25 - 28, 2019

Colorado, Denver

Acceptance Rates

Overall Acceptance Rate 69 of 137 submissions, 50%

Contributors

Other Metrics

View Article Metrics

Bibliometrics & Citations

Bibliometrics

Article Metrics

36
Total Citations
View Citations
1,201
Total Downloads

Downloads (Last 12 months)298
Downloads (Last 6 weeks)14

Reflects downloads up to 25 Aug 2024

Other Metrics

View Author Metrics

Citations

Cited By

Elfares MReisert PHu ZTang WKüsters RBulling A(2024)PrivatEyes: Appearance-based Gaze Estimation Using Federated Secure Multi-Party ComputationProceedings of the ACM on Human-Computer Interaction10.1145/36556068:ETRA(1-23)Online publication date: 28-May-2024
https://dl.acm.org/doi/10.1145/3655606
Özdel SBozkir EKasneci E(2024)Privacy-preserving Scanpath Comparison for Pervasive Eye TrackingProceedings of the ACM on Human-Computer Interaction10.1145/36556058:ETRA(1-28)Online publication date: 28-May-2024
https://dl.acm.org/doi/10.1145/3655605
Wilson EIbragimov AProulx MTetali SButler KJain E(2024)Privacy-Preserving Gaze Data Streaming in Immersive Interactive Virtual Reality: Robustness and User ExperienceIEEE Transactions on Visualization and Computer Graphics10.1109/TVCG.2024.337203230:5(2257-2268)Online publication date: 8-Mar-2024
https://dl.acm.org/doi/10.1109/TVCG.2024.3372032
Wei XHellge CYang CSon J(2024)Improving QoE-Privacy Tradeoff in XR StreamingIEEE Signal Processing Letters10.1109/LSP.2024.340161631(1504-1508)Online publication date: 2024
https://doi.org/10.1109/LSP.2024.3401616
Byrne SCastner NBozkir ENiehorster DKasneci E(2024)From Lenses to Living Rooms: A Policy Brief on Eye Tracking in XR Before the Impending Boom2024 IEEE International Conference on Artificial Intelligence and eXtended and Virtual Reality (AIxVR)10.1109/AIxVR59861.2024.00020(90-96)Online publication date: 17-Jan-2024
https://doi.org/10.1109/AIxVR59861.2024.00020
Ren XFan JXu NWang SDong CWen Z(2024) DPGazeSynthInformation Sciences: an International Journal10.1016/j.ins.2024.120720675:COnline publication date: 1-Jul-2024
https://dl.acm.org/doi/10.1016/j.ins.2024.120720
Shang J(2024)Security and Privacy of Augmented Reality SystemsNetwork Security Empowered by Artificial Intelligence10.1007/978-3-031-53510-9_11(305-330)Online publication date: 24-Feb-2024
https://doi.org/10.1007/978-3-031-53510-9_11
Kamoun FIqbal FZeresenay SKhalid ZIkuesan RAbraham S(2023)Metaverse ForensicsForecasting Cyber Crimes in the Age of the Metaverse10.4018/979-8-3693-0220-0.ch010(182-208)Online publication date: 29-Dec-2023
https://doi.org/10.4018/979-8-3693-0220-0.ch010
Putrino AMarinelli ERaso MCalace VZaami S(2023)Clear Aligners and Smart Eye Tracking Technology as a New Communication Strategy between Ethical and Legal IssuesLife10.3390/life1302029713:2(297)Online publication date: 20-Jan-2023
https://doi.org/10.3390/life13020297
Kröger J(2023)Technology Cannot Fix the Privacy CrisisSSRN Electronic Journal10.2139/ssrn.4326794Online publication date: 2023
https://doi.org/10.2139/ssrn.4326794
Show More Cited By

View Options

View options

PDF

View or Download as a PDF file.

eReader

View online with eReader.

Get Access

Login options

Check if you have access through your login credentials or your institution to get full access on this article.

Full Access

Get this Publication

Media

Figures

Other

Tables

View Table of Contents

-