Beyond Identity: What Information Is Stored in Biometric Face Templates?
Not on the map. Why?
Abstract (arXiv)
Deeply-learned face representations enable the success of current face recognition systems. Despite the ability of these representations to encode the identity of an individual, recent works have shown that more information is stored within, such as demographics, image characteristics, and social traits. This threatens the user's privacy, since for many applications these templates are expected to be solely used for recognition purposes. Knowing the encoded information in face templates helps to develop bias-mitigating and privacy-preserving face recognition technologies. This work aims to support the development of these two branches by analysing face templates regarding 113 attributes. Experiments were conducted on two publicly available face embeddings. For evaluating the predictability of the attributes, we trained a massive attribute classifier that is additionally able to accurately state its prediction confidence. This allows us to make more sophisticated statements about the attribute predictability. The results demonstrate that up to 74 attributes can be accurately predicted from face templates. Especially non-permanent attributes, such as age, hairstyles, haircolors, beards, and various accessories, found to be easily-predictable. Since face recognition systems aim to be robust against these variations, future research might build on this work to develop more understandable privacy preserving solutions and build robust and fair face templates.
Key facts. Cited by 23 papers in the map (data through 7 Oct 2026). First posted on arXiv 21 Sep 2020.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 6; 2022: 4; 2023: 2; 2024: 1; 2025: 3; 2026: 7.
23 papers.
Sort:
By area:
- 2021A Comprehensive Study on Face Recognition Biases Beyond Demographicscited by 86
- 2021PASS: Protected Attribute Suppression System for Mitigating Bias in Face Recognitioncited by 38
- 2021Anatomizing Bias in Facial Analysiscited by 18
- 2022An Overview of Privacy-enhancing Technologies in Biometric Recognitioncited by 17
- 2021Towards Protecting Face Embeddings in Mobile Face Verification Scenarioscited by 14
- 2022Analyzing Fairness in Deepfake Detection With Massively Annotated Databasescited by 13
- 2021Biometric Template Protection for Neural-Network-based Face Recognition Systems: A Survey of Methods and Evaluation Techniquescited by 11
- 2022Causality-Inspired Taxonomy for Explainable Artificial Intelligencecited by 9
- 2022On the (Limited) Generalization of MasterFace Attacks and Its Relation to the Capacity of Face Representationscited by 7
- 2023Gradient Attention Balance Network: Mitigating Face Recognition Racial Bias via Gradient Attentioncited by 7
- 2021An Attack on Facial Soft-biometric Privacy Enhancementcited by 5
- 2025Dissecting Human Body Representations in Deep Networks Trained for Person Identificationcited by 4
11 more
- 2024Massively Annotated Datasets for Assessment of Synthetic and Real Data in Face Recognitioncited by 2
- 2025On the Illusion of Gender Bias in Face Recognition: Explaining the Fairness Issue Through Non-demographic Attributescited by 2
- 2026A Deeper Dive into the Irreversibility of PolyProtect: Making Protected Face Templates Harder to Invertcited by 1
- 2023Generalizability and Application of the Skin Reflectance Estimate Based on Dichromatic Separation (SREDS)cited by 0
- 2025A Responsible Face Recognition Approach for Small and Mid-Scale Systems Through Personalized Neural Networkscited by 0
- 2026Realistic Face Reconstruction from Facial Embeddings via Diffusion Modelscited by 0
- 2026Variational Latent Entropy Estimation Disentanglement: Controlled Attribute Leakage for Face Recognitioncited by 0
- 2026Bias Mitigation in Face Recognition via Demographic-based Supervised Contrastive Learningcited by 0
- 2026SCOUT: Semantic Concept Discovery for Open-Vocabulary Editing of face Recognition Templatescited by 0
- 2026Unmasking Face Embeddings: Reading, Rendering and Naming with Foundation Modelscited by 0
- 2026Is it Possible to Generate Irreversible PolyProtected Templates from Face Embeddings using System-Specific Keys?cited by 0
- 2026Is it Possible to Generate Irreversible PolyProtected Templates from Face Embeddings using System-Specific Keys?1 Oct 2026
- 2026Unmasking Face Embeddings: Reading, Rendering and Naming with Foundation Models31 Aug 2026
- 2026SCOUT: Semantic Concept Discovery for Open-Vocabulary Editing of face Recognition Templates17 Aug 2026
- 2026Bias Mitigation in Face Recognition via Demographic-based Supervised Contrastive Learning13 Aug 2026
- 2026A Deeper Dive into the Irreversibility of PolyProtect: Making Protected Face Templates Harder to Invert5 May 2026
- 2026Variational Latent Entropy Estimation Disentanglement: Controlled Attribute Leakage for Face Recognition13 Apr 2026
- 2026Realistic Face Reconstruction from Facial Embeddings via Diffusion Models13 Feb 2026
- 2025A Responsible Face Recognition Approach for Small and Mid-Scale Systems Through Personalized Neural Networks26 May 2025
- 2025Dissecting Human Body Representations in Deep Networks Trained for Person Identification21 Feb 2025
- 2025On the Illusion of Gender Bias in Face Recognition: Explaining the Fairness Issue Through Non-demographic Attributes21 Jan 2025
- 2024Massively Annotated Datasets for Assessment of Synthetic and Real Data in Face Recognition23 Apr 2024
- 2023Generalizability and Application of the Skin Reflectance Estimate Based on Dichromatic Separation (SREDS)3 Sep 2023
11 more
- 2023Gradient Attention Balance Network: Mitigating Face Recognition Racial Bias via Gradient Attention5 Apr 2023
- 2022Causality-Inspired Taxonomy for Explainable Artificial Intelligence19 Aug 2022
- 2022Analyzing Fairness in Deepfake Detection With Massively Annotated Databases11 Aug 2022
- 2022An Overview of Privacy-enhancing Technologies in Biometric Recognition21 Jun 2022
- 2022On the (Limited) Generalization of MasterFace Attacks and Its Relation to the Capacity of Face Representations23 Mar 2022
- 2021Anatomizing Bias in Facial Analysis13 Dec 2021
- 2021An Attack on Facial Soft-biometric Privacy Enhancement24 Nov 2021
- 2021Biometric Template Protection for Neural-Network-based Face Recognition Systems: A Survey of Methods and Evaluation Techniques11 Oct 2021
- 2021Towards Protecting Face Embeddings in Mobile Face Verification Scenarios1 Oct 2021
- 2021PASS: Protected Attribute Suppression System for Mitigating Bias in Face Recognition9 Aug 2021
- 2021A Comprehensive Study on Face Recognition Biases Beyond Demographics2 Mar 2021
- 2021A Comprehensive Study on Face Recognition Biases Beyond Demographicscited by 86
- 2021PASS: Protected Attribute Suppression System for Mitigating Bias in Face Recognitioncited by 38
- 2021Anatomizing Bias in Facial Analysiscited by 18
- 2022An Overview of Privacy-enhancing Technologies in Biometric Recognitioncited by 17
- 2021Towards Protecting Face Embeddings in Mobile Face Verification Scenarioscited by 14
- 2022Analyzing Fairness in Deepfake Detection With Massively Annotated Databasescited by 13
- 2021Biometric Template Protection for Neural-Network-based Face Recognition Systems: A Survey of Methods and Evaluation Techniquescited by 11
- 2022Causality-Inspired Taxonomy for Explainable Artificial Intelligencecited by 9
- 2022On the (Limited) Generalization of MasterFace Attacks and Its Relation to the Capacity of Face Representationscited by 7
- 2023Gradient Attention Balance Network: Mitigating Face Recognition Racial Bias via Gradient Attentioncited by 7
- 2021An Attack on Facial Soft-biometric Privacy Enhancementcited by 5
- 2025Dissecting Human Body Representations in Deep Networks Trained for Person Identificationcited by 4
12 most cited of 22 All 22 (JSON)
- 2026Is it Possible to Generate Irreversible PolyProtected Templates from Face Embeddings using System-Specific Keys?1 Oct 2026
- 2026Unmasking Face Embeddings: Reading, Rendering and Naming with Foundation Models31 Aug 2026
- 2026SCOUT: Semantic Concept Discovery for Open-Vocabulary Editing of face Recognition Templates17 Aug 2026
- 2026Bias Mitigation in Face Recognition via Demographic-based Supervised Contrastive Learning13 Aug 2026
- 2026A Deeper Dive into the Irreversibility of PolyProtect: Making Protected Face Templates Harder to Invert5 May 2026
- 2026Variational Latent Entropy Estimation Disentanglement: Controlled Attribute Leakage for Face Recognition13 Apr 2026
- 2025A Responsible Face Recognition Approach for Small and Mid-Scale Systems Through Personalized Neural Networks26 May 2025
- 2025Dissecting Human Body Representations in Deep Networks Trained for Person Identification21 Feb 2025
- 2025On the Illusion of Gender Bias in Face Recognition: Explaining the Fairness Issue Through Non-demographic Attributes21 Jan 2025
- 2024Massively Annotated Datasets for Assessment of Synthetic and Real Data in Face Recognition23 Apr 2024
- 2023Generalizability and Application of the Skin Reflectance Estimate Based on Dichromatic Separation (SREDS)3 Sep 2023
- 2023Gradient Attention Balance Network: Mitigating Face Recognition Racial Bias via Gradient Attention5 Apr 2023
12 newest of 22 All 22 (JSON)