{"id":20417,"date":"2026-03-12T08:11:47","date_gmt":"2026-03-12T12:11:47","guid":{"rendered":"https:\/\/www.purdue.edu\/newsroom\/?p=20417"},"modified":"2026-03-12T08:12:02","modified_gmt":"2026-03-12T12:12:02","slug":"privacy-by-design-purdue-tech-protects-against-identity-leaking-during-ai-photo-editing","status":"publish","type":"post","link":"https:\/\/www.purdue.edu\/newsroom\/2026\/Q1\/privacy-by-design-purdue-tech-protects-against-identity-leaking-during-ai-photo-editing","title":{"rendered":"\u2018Privacy by design\u2019: Purdue tech protects against identity leaking during AI photo editing"},"content":{"rendered":"\n<p>WEST LAFAYETTE, Ind. \u2014 Consumers, businesses and institutions may soon have private, secure and trustworthy generative AI tools for editing and sharing profile photos, ID images and personal pictures without exposing their private identities to external platforms.<\/p>\n\n\n\n<p>Purdue University researchers <a href=\"https:\/\/engineering.purdue.edu\/IE\/people\/ptProfile?resource_id=119657\" target=\"_blank\" rel=\"noreferrer noopener\">Vaneet Aggarwal<\/a>, Dipesh Tamboli and Vineet Punyamoorty have developed the patent-pending system, which is utilized before and after photos are uploaded to an AI editing platform.<\/p>\n\n\n\n<p>\u201cResults of validation testing show that we can preserve editing quality while dramatically reducing what AI models can learn about your identity,\u201d Aggarwal said. \u201cThis is a critical step toward trustworthy generative AI.\u201d<\/p>\n\n\n\n<p>Their research has been published in the peer-reviewed journal <a href=\"https:\/\/ieeexplore.ieee.org\/document\/11422932\" target=\"_blank\" rel=\"noreferrer noopener\">IEEE Transactions on Artificial Intelligence<\/a>.<\/p>\n\n\n\n<p>Aggarwal is a University Faculty Scholar and the Reilly Professor of <a href=\"https:\/\/engineering.purdue.edu\/IE\" target=\"_blank\" rel=\"noreferrer noopener\">Industrial Engineering<\/a> with courtesy appointments in the <a href=\"https:\/\/www.cs.purdue.edu\/index.html\" target=\"_blank\" rel=\"noreferrer noopener\">Department of Computer Science<\/a> and the <a href=\"https:\/\/engineering.purdue.edu\/ECE\" target=\"_blank\" rel=\"noreferrer noopener\">Elmore Family School of Electrical and Computer Engineering<\/a>. Tamboli is a doctoral alumnus and Punyamoorty is a doctoral candidate in computer and electrical engineering; both worked in Aggarwal\u2019s <a href=\"https:\/\/engineering.purdue.edu\/CLANLabs\/people\" target=\"_blank\" rel=\"noreferrer noopener\">research group<\/a>.<\/p>\n\n\n\n<p>\u201cOur system allows users to mask sensitive regions on their photo, like the face, from an AI editing service,\u201d Tamboli said. \u201cThose regions are masked locally on the user\u2019s device using a detailed outline of the region.\u201d<\/p>\n\n\n\n<p>Tamboli said only the masked image is sent to the AI editing service.<\/p>\n\n\n\n<p>\u201cAfter the image is edited by AI, our system reintegrates the sensitive region back into the edited image using geometric alignment and blending,\u201d he said.<\/p>\n\n\n\n<p>Aggarwal said the Purdue system is the first solution that delivers:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Full privacy. Sensitive data never leaves the user\u2019s device.<\/li>\n\n\n\n<li>High-quality edits. External AI sees the rest of the image normally.<\/li>\n\n\n\n<li>Compatibility. It works with any commercial generative AI model, so no retraining is needed.<\/li>\n\n\n\n<li>Photorealism. It produces seamless, natural results in the final edited image.<\/li>\n<\/ul>\n\n\n\n<p>\u201cIt\u2019s privacy by design,\u201d he said. \u201cWith our system, the AI platform never sees the face, but the final edited image still looks completely natural.\u201d<\/p>\n\n\n\n<p>The researchers disclosed the system to the <a href=\"https:\/\/purdueinnovates.org\/otc\/\" target=\"_blank\" rel=\"noreferrer noopener\">Purdue Innovates Office of Technology Commercialization<\/a>, which has applied for a patent to protect the intellectual property. Industry partners interested in developing or commercializing the work should contact Parag Vasekar, business development and licensing manager, at <a href=\"mailto:psvasekar@prf.org\">psvasekar@prf.org<\/a> about track code <a href=\"https:\/\/licensing.prf.org\/product\/privacy-preserving-method-and-system-for-generative-ai-image-processing\">71122<\/a>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Addressing privacy risks from AI editing tools<\/h2>\n\n\n\n<p>Tamboli said modern generative AI tools edit photos with impressive realism but require users to upload full, unaltered images to cloud-based systems. These images include private details including the face and identifying features.<\/p>\n\n\n\n<p>\u201cRequiring full, unaltered images creates serious privacy and security risks,\u201d he said. \u201cOnce a photo is uploaded, users lose control over where their biometric data goes, how it is stored or how it might be misused.\u201d<\/p>\n\n\n\n<p>Tamboli said previous privacy approaches relied on blurring sensitive regions, locking parts of an image, using stylization filters or avoiding cloud upload entirely. Some also use traditional anonymization or differential privacy.<\/p>\n\n\n\n<p>Aggarwal said these traditional solutions have major drawbacks:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Blurring or blocking sensitive regions makes an image unusable for high-quality AI editing.<\/li>\n\n\n\n<li>Local editing tools cannot match cloud-based generative models in realism and flexibility.<\/li>\n\n\n\n<li>Differential privacy techniques do not protect biometric pixels, which can still be reconstructed.<\/li>\n\n\n\n<li>Once an image is sent to a third-party AI model, users have no control over retention, training use or sharing.<\/li>\n<\/ul>\n\n\n\n<p>\u201cSo these traditional methods break the editing process or fail to fully protect personal identity,\u201d he said.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Validating and developing the Purdue privacy system<\/h2>\n\n\n\n<p>The researchers validated their system by testing how well leading AI foundation models infer biometric attributes from masked versus unmasked images.<\/p>\n\n\n\n<p>They found the Purdue system significantly reduced the ability of AI models to detect attributes such as eye color, facial hair and age group. In some cases, attribute-classification accuracy dropped by more than 80%, demonstrating strong protection against identity leakage.<\/p>\n\n\n\n<p>The research team is taking steps to bring the technology closer to real-world deployment, including expanding the system to protect additional sensitive features such as medical details, ID documents and other privacy-critical content.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">About Purdue Innovates Office of Technology Commercialization<\/h2>\n\n\n\n<p>The&nbsp;<a href=\"https:\/\/nam04.safelinks.protection.outlook.com\/?url=https%3A%2F%2Fpurdueinnovates.org%2Fotc&amp;data=05%7C02%7Cbdspauld%40purdue.edu%7Cf3263ae99fc74eea4e4608de6efbe76d%7C4130bd397c53419cb1e58758d6d63f21%7C1%7C0%7C639070225405736193%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&amp;sdata=IRrtWs3jM%2Fpnak1g%2Fxd770Tm5rswoQigTemuOUtQs%2BY%3D&amp;reserved=0\" target=\"_blank\" rel=\"noreferrer noopener\">Purdue Innovates Office of Technology Commercialization<\/a>&nbsp;operates one of the most comprehensive technology transfer programs among leading research universities in the U.S. Services provided by this office support the economic development initiatives of Purdue University and benefit the university\u2019s academic activities through commercializing, licensing and protecting Purdue intellectual property. In fiscal year 2025, the office reported 161 deals executed with 269 technologies licensed, 479 invention disclosures received,&nbsp;and 267 U.S. and international patents received. The office is managed by the Purdue Research Foundation, a private, nonprofit foundation created to advance the mission of Purdue University. Contact&nbsp;<a href=\"mailto:otcip@prf.org\" target=\"_blank\" rel=\"noreferrer noopener\"><strong>otcip@prf.org<\/strong><\/a>&nbsp;for more information.&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">About Purdue University<\/h2>\n\n\n\n<p>Purdue University is a public research university leading with excellence at scale. Ranked among top 10 public universities in the United States, Purdue discovers, disseminates and deploys knowledge with a quality and at a scale second to none. More than 106,000 students study at Purdue across multiple campuses, locations and modalities, including more than 57,000 at our main campus in West Lafayette and Indianapolis. Committed to affordability and accessibility, Purdue\u2019s main campus has frozen tuition 14 years in a row. See how Purdue never stops in the persistent pursuit of the next giant leap \u2014 including its integrated, comprehensive Indianapolis urban expansion; the Mitch Daniels School of Business; Purdue Computes; and the One Health initiative \u2014 at <a href=\"https:\/\/www.purdue.edu\/president\/strategic-initiatives\">https:\/\/www.purdue.edu\/president\/strategic-initiatives<\/a>.<\/p>\n\n\n<div id=\"note\" class=\"post-content__attribution \">\n    <div class=\"columns\"> \n                    <div class=\"column\"> \n                <p class=\"post-content__source\">\n                    <strong>Media contact:<\/strong> Steve Martin, <a href=\"mailto:sgmartin@prf.org\">sgmartin@prf.org<\/a>                <\/p>\n            <\/div>\n                    <\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>WEST LAFAYETTE, Ind. \u2014 Consumers, businesses and institutions may soon have private, secure and trustworthy generative AI tools for editing and sharing profile photos, ID images and personal pictures without exposing their private identities to external platforms. Purdue University researchers<\/p>\n","protected":false},"author":25,"featured_media":20412,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[316],"tags":[],"department":[],"source":[35],"purdue_today_topic":[],"coauthors":[44],"class_list":["post-20417","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-prf","source-purdue-research-foundation"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.purdue.edu\/newsroom\/wp-json\/wp\/v2\/posts\/20417","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.purdue.edu\/newsroom\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.purdue.edu\/newsroom\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.purdue.edu\/newsroom\/wp-json\/wp\/v2\/users\/25"}],"replies":[{"embeddable":true,"href":"https:\/\/www.purdue.edu\/newsroom\/wp-json\/wp\/v2\/comments?post=20417"}],"version-history":[{"count":3,"href":"https:\/\/www.purdue.edu\/newsroom\/wp-json\/wp\/v2\/posts\/20417\/revisions"}],"predecessor-version":[{"id":20421,"href":"https:\/\/www.purdue.edu\/newsroom\/wp-json\/wp\/v2\/posts\/20417\/revisions\/20421"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.purdue.edu\/newsroom\/wp-json\/wp\/v2\/media\/20412"}],"wp:attachment":[{"href":"https:\/\/www.purdue.edu\/newsroom\/wp-json\/wp\/v2\/media?parent=20417"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.purdue.edu\/newsroom\/wp-json\/wp\/v2\/categories?post=20417"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.purdue.edu\/newsroom\/wp-json\/wp\/v2\/tags?post=20417"},{"taxonomy":"department","embeddable":true,"href":"https:\/\/www.purdue.edu\/newsroom\/wp-json\/wp\/v2\/department?post=20417"},{"taxonomy":"source","embeddable":true,"href":"https:\/\/www.purdue.edu\/newsroom\/wp-json\/wp\/v2\/source?post=20417"},{"taxonomy":"purdue_today_topic","embeddable":true,"href":"https:\/\/www.purdue.edu\/newsroom\/wp-json\/wp\/v2\/purdue_today_topic?post=20417"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/www.purdue.edu\/newsroom\/wp-json\/wp\/v2\/coauthors?post=20417"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}