‎⁨PREreviews de Privacy-Preserving End-to-End Full-Duplex Speech Dialogue Models⁩

Aller directement aux détails du preprint Aller directement aux PREreviews

Privacy-Preserving End-to-End Full-Duplex Speech Dialogue Models

par Nikita Kuzmin, Tao Zhong, Jiajun Deng, Yingke Zhu, Tristan Tsoi, Tianxiang Cao, Simon Lui, Kong Aik Lee et Eng Siong Chng

Publié: 9 mars 2026
Serveur de preprints: arXiv
DOI: 10.48550/arxiv.2603.08179

Résumé

End-to-end full-duplex speech models feed user audio through an always-on LLM backbone, yet the speaker privacy implications of their hidden representations remain unexamined. Following the VoicePrivacy 2024 protocol with a lazy-informed attacker, we show that the hidden states of SALM-Duplex and Moshi leak substantial speaker identity across all transformer layers. Layer-wise and turn-wise analyses reveal that leakage persists across all layers, with SALM-Duplex showing stronger leakage in early layers while Moshi leaks uniformly, and that Linkability rises sharply within the first few turns. We propose two streaming anonymization setups using Stream-Voice-Anon: a waveform-level front-end (Anon-W2W) and a feature-domain replacement (Anon-W2F). Anon-W2F raises EER by over 3.5x relative to the discrete encoder baseline (11.2% to 41.0%), approaching the 50% random-chance ceiling, while Anon-W2W retains 78-93% of baseline sBERT across setups with sub-second response latency (FRL under 0.8 s).

Lire le preprint

1 PREreview

Rédigez un PREreview Demander une PREreview

PREreview par shireesh apte

Rédigé par shireesh apte

summary: 'Privacy-Preserving End-to-End Full-Duplex Speech Dialogue Models by Nikita Kuzmin, Tao Zhong, Jiajun Deng (corresponding author), Yingke Zhu, Tristan Tsoi, Tianxiang Cao, Simon Lui, Kong Aik Lee, and Eng Siong Chng audits speaker identity leakage in hidden states of always-on,…

Lire la PREreview de shireesh apte