LiveAnon: Improving Privacy and Utility in Streaming Speaker Anonymization with Codec Language Models
Authors: Yejin Kim, Kyungsu Kim, Seungu Han, Kyogu Lee
Organizations: Music and Audio Research Group (MARG) · Department of Intelligence and Information, Seoul National University · Interdisciplinary Program in Artificial Intelligence, Seoul National University
Speaker anonymization (SA) aims to conceal speaker identity while preserving linguistic content and emotion, but existing streaming systems often lose emotion information through discrete content bottlenecks or require emotion-specific modeling. We present LiveAnon, a voice-conversion-based streaming SA system that directly conditions an autoregressive codec language model on hidden features from a pretrained streaming ASR encoder, preserving emotion without emotion-specific supervision. To reduce codec-generation latency, we introduce capped RVQ decoding, which preserves dependencies among coarse codebooks while predicting the remaining codebooks in parallel. Under VPC24, LiveAnon improves intelligibility and emotion preservation over fixed-target Stream-Voice-Anon (SVA), a strong prior streaming SA system, matches emotion-prompted SVA in emotion preservation, and achieves the strongest semi-informed privacy among streaming systems. Under VPC26, it ranks second across all metrics among the evaluated anonymization systems, demonstrating a strong privacy-utility balance.
Figures & tables
Figure 1: Overview of LiveAnon during (a) training and (b) inference. A 3-s reference utterance provides codec tokens for acoustic prompting, and features from a frozen streaming ASR encoder provide content conditioning. Training uses teacher-forced codec sequences, whereas inference pre-fills the reference prompt into the Transformer KV cache and continues autoregressive generation with the capped RVQ delay pattern.
System
Speaker Acc. ↓
Emotion UAR ↑
SVA
32.50
39.95
LiveAnon
28.75
55.17
Table 1: Linear probing of content representations. Lower speaker accuracy and higher emotion UAR are preferred.
System
WER ↓
UAR ↑
EER-L ↑
EER-S ↑
Original
1.83
70.07
5.16
–
DarkStream [ 28 ]
8.75
34.73
47.26
21.83
TVTSyn [ 29 ]
5.35
37.32
47.55
14.57
SVA [ 10 ] cremad-emo-4rnd
6.59
44.59
46.53
18.63
SVA [ 10 ] vctk-1fix
4.54
39.71
47.19
15.92
SVA+ [ 18 ] frame-distill
5.77
49.22
48.98
18.30
Table 2: Comparison with streaming SA systems under the VPC24 protocol.
System
WER ↓
UAR ↑
EER-L ↑
EER-S ↑
Original
1.82
70.07
4.75
–
B2
9.36
54.59
6.89
3.98
B3
4.21
38.09
22.55
15.28
B4
6.03
42.38
17.19
13.21
B5
4.68
38.46
28.30
18.55
LiveAnon
4.30
44.09
26.08
17.99
Table 3: Comparison with VPC26 challenge baselines under the VPC26 evaluation protocol.
Chunk
Align.
Codec
Total
RTF ↓
160 ms
120 ms
60 ms
340 ms
0.34
320 ms
120 ms
60 ms
500 ms
0.17
Table 4: Algorithmic latency and real-time factor (RTF) of LiveAnon.
Figure 2: Privacy–utility–latency trade-off under different capped-delay settings. Delay cap 3 provides the best operating point.
We address the challenge of preserving emotional content in streaming speaker anonymization (SA). Neural audio codec language models trained for audio continuation tend to degrade source emotion: content tokens discard emotional information, and the model defaults to dominant acoustic patterns rather than preserving paralinguistic attributes. We propose supervised finetuning with neutral-emotion utterance pairs from the same speaker, combined with frame-level emotion distillation on acoustic token hidden states. All modifications are confined to finetuning, which takes less than 2 hours on 4 GPUs and adds zero inference latency overhead, while maintaining a competitive 180ms streaming latency. On the VoicePrivacy 2024 protocol, our approach achieves a 49.2% UAR (emotion preservation) with 5.77% WER (intelligibility), a +24% relative UAR improvement over the baseline (39.7%->49.2%) and +10% over the emotion-prompt variant (44.6% UAR), while maintaining strong privacy (EER 49.0%). Demo and code are available: https://anonymous3842031239.github.io/
Nikita Kuzmin, Kong Aik Lee, Eng Siong Chng
Nanyang Technological University, Singapore · Institute for Infocomm Research (I2R), A*STAR, Singapore · The Hong Kong Polytechnic University, Hong Kong
Speaker anonymization (SA) systems modify timbre while leaving regional or non-native accent cues intact, which is problematic because such cues can reveal a speaker's first-language or geographic background and narrow the anonymity set. To address this issue, we present PHONOS, a streaming module for real-time SA that performs accent neutralization in a privacy sense: reducing accent-origin cues by converting non-native segmental realizations toward a chosen target accent domain. Our approach pre-generates golden speaker utterances that preserve source timbre and rhythm but replace foreign segmentals with native ones using silence-aware DTW alignment and zero-shot voice conversion. These utterances supervise a causal accent translator that maps non-native content tokens to native equivalents with at most 40ms look-ahead, trained using joint cross-entropy and CTC losses. Our evaluations show an 81% reduction in non-native accent confidence, with listening-test accentedness ratings consistent with this shift. PHONOS also moves outputs away from the original speaker in embedding space, suggesting lower linkability under an embedding-based proxy, while running with ≤241ms end-to-end latency on a single GPU.
Waris Quamer, Mu-Ruei Tseng, Ghady Nasrallah +1
Department of Computer Science & Engineering, Texas A&M University, College Station, US
Speaker anonymization suppresses speaker-identifying attributes from speech while preserving linguistic content and quality. We propose repurposing XTTSv2, a multilingual voice cloning model trained on 27k hours of speech, for speaker anonymization without retraining. Our key insight is that XTTSv2's voice cloning capabilities preserve prosodic structure independently of speaker identity, enabling voice conversion by conditioning on a pseudo-speaker. We introduce an iterative refinement strategy that balances privacy and utility by maximizing a harmonic mean of speaker dissimilarity and intelligibility. Evaluated on seven European languages across CommonVoice and Multilingual LibriSpeech, our system achieves near-optimal privacy (EER ≈ 0.49), competitive intelligibility, and substantially better speech quality than dedicated anonymization baselines, while requiring no language-specific training. We release the code here: https://github.com/rm00cr/coqui-tts.
Romolo Muletta, Felix Matthias Saaro, Mark Cieliebak +1
Centre for Artificial Intelligence ZHAW School of Engineering