Search papers, labs, and topics across Lattice.
This paper introduces InkShield, a novel defense mechanism designed to protect handwritten text from unauthorized mimicry by optimizing perturbations confined to ink-stroke edges. By selecting a decoy writer to define a style-displacement direction and utilizing a frozen handwriting-generation surrogate, InkShield minimizes visual artifacts while maintaining the readability of the original text. The results show a significant reduction in the retrieval rates of generated samples as the target writer, decreasing from 11.94%/36.52% to 2.03%/8.79%, while preserving the visual fidelity of the protected references (LPIPS 0.0078).
InkShield reduces the risk of handwriting forgery by over 90% while keeping the original style visually intact.
Recent handwritten text generators can reproduce a writer's style from publicly available references, posing risks of document forgery and identity misuse. An attacker may use a publicly available handwritten note or signature sample to generate forged recommendation letters or authorization forms, leading to document fraud, identity misuse, and misleading decisions. However, existing protections against unauthorized image editing or synthesis transfer poorly to handwriting style mimicry. Designed for natural images with complex backgrounds, they often optimize perturbations over the whole image. For sparse handwriting images, such global perturbations become conspicuous in blank background regions and largely degrade the visual quality. In this work, we propose InkShield, a proactive writing-style defense that protects reference images before release. InkShield selects a decoy writer to define a style-displacement direction, optimizes perturbations with a frozen handwriting-generation surrogate, and confines them to ink-stroke edges to avoid conspicuous background artifacts. On IAM, the average Top-1/Top-5 rates at which generated samples are retrieved as the target writer by two independent writer evaluators decrease from 11.94%/36.52% to 2.03%/8.79%. Meanwhile, the protected references remain visually close to the originals (LPIPS 0.0078), and the generated text remains readable. InkShield also exhibits transferability to other handwriting generators. Overall, InkShield provides practical protection against unauthorized handwriting style mimicry.
