Research
PCHMR: Empowering and Benchmarking Human Mesh Recovery in Privacy-Constrained Real-World Settings
Overview Research area: Computer vision — 3D human mesh recovery (HMR) — combined with federated learning and privacy-preserving distributed training. Technical level: Advanced. The paper assumes fami

- arXiv
- 2610.24841
- Published
- 2026-10-17
- Authors
- Zeyu Cao, Qingxuan Wu, Zhiyang Dou, Rui Xu, Yuan Liu, Javier Fernandez-Marques, Nicholas D. Lane, Taku Komura, Wenping Wang
AI summary
Overview
Research area: Computer vision — 3D human mesh recovery (HMR) — combined with federated learning and privacy-preserving distributed training.
Technical level: Advanced. The paper assumes familiarity with SMPL-based body models, transformer HMR backbones, federated optimization, and secure multi-party computation.
Scope: A benchmark study of how state-of-the-art monocular HMR models behave when trained without centralizing raw images, plus a depth-aware on-device annotation pipeline (DePoser) that supplies the local supervision such training requires.
What This Paper Is About
Existing HMR models are developed and evaluated under a "centralized" assumption: sensitive human images are gathered from user devices onto one training server. The authors ask what happens to accuracy when that assumption is removed — when raw images stay on user devices and only model updates are shared — and they build a benchmark (PCHMR) around federated learning and a secure-aggregation variant to answer it. Because privacy constraints also block centralized labeling, they add DePoser, a local annotator that uses a depth foundation model to generate mesh pseudo-labels on the device itself.
Key Contributions
- Identification of the centralized-data assumption. The authors document that standard HMR training pipelines presuppose centralized data access, and they evaluate how representative backbones (FastMETRO and TORE) behave once that presupposition is removed — a setting they frame as the "performance-privacy dilemma."
- A privacy-constrained benchmark. A Flower-based client-server harness covering 10, 100, and 1000 simulated clients, three data-heterogeneity schemes (Latent Dirichlet Allocation, a mixed multi-dataset partition, and a natural per-scene partition), three federated optimizers (FedAvg, FedOpt, FedProx), and an MPC-based secure-aggregation variant under an honest-but-curious server assumption.
- DePoser, a depth-aware local annotator. A monocular optimization-based pipeline that combines Sapiens-pose 2D keypoints with Sapiens-depth relative depth, aligned to metric scale by a lightweight linear regressor trained with a general absolute depth estimator, and fitted with an L-BFGS objective that includes a scale-invariant logarithmic (SILog) depth loss.
- A personalization study on in-the-wild VR data. A dataset of over 3000 images from internet and in-house VR/AR footage across 4 scenes, used to fine-tune collaboratively trained models on DePoser pseudo-labels.
Main Findings
- Scale is largely tolerable. With 10, 100, and 1000 clients (10 sampled per round, one local epoch each), FastMETRO-S moves from 57.98 MPJPE / 40.62 PA-MPJPE centralized to 60.82 / 44.53 at 1000 clients; TORE-S moves from 63.88 / 41.99 to 66.04 / 44.04 — roughly a 2–4 mm drop. At 10 clients both models are numerically better than their centralized counterparts (FM-S 56.85 / 40.52; TORE-S 61.27 / 41.60).
- Federated training is far slower to converge. The 1000-client setting required 6000 global rounds, a caveat the authors flag explicitly.
- Strong skew does not hurt, and can help. Under LDA heterogeneity, the most skewed setting (α = 0.1) produced lower MPJPE and PA-MPJPE than the centralized baseline for both configurations. The authors offer an aggregation-induced regularization effect akin to meta-learning as a possible explanation but state their experiments do not isolate it from centralized-run variance or remaining training-budget differences.
- Optimizer choice barely matters. FedAvg, FedOpt, and FedProx perform similarly across IID and LDA (α = 0.5, 1, 10) partitions, with no clear trend of superiority.
- Mixed-dataset training is competitive. On a mix of Human3.6M, UP-3D, COCO, MuCo-3DHP, and MPII evaluated on Human3.6M, MPJPE improves by 3.1 mm for FastMETRO-S (58.28 vs 61.38) and 2.3 mm for TORE-S (61.59 vs 63.89), with PA-MPJPE within 1.2 mm of centralized.
- In-the-wild fine-tuning holds up. On 3DPW, all PCHMR variants stay within 2.1 mm of centralized on every metric; the largest gap is FastMETRO under the natural per-scene partition (+1.9 mm MPJPE, +2.1 mm MPVPE). The natural partition uses 20 devices with 5 sampled per round.
- Personalization yields large gains. After two epochs of local fine-tuning, MPVPE falls by up to 110.7 mm (VR-game-1: 176.24 to 65.57), with VR-runner dropping from 109.50 to 93.23 and Oculus from 103.92 to 56.76 — measured, however, against DePoser pseudo-labels rather than independent ground truth.
- DePoser outperforms SMPLify-X. On a 300-image 3DPW subsample, DePoser reaches 162.60 MPVPE / 151.19 MPJPE / 71.14 PA-MPJPE versus 198.66 / 181.07 / 87.17 for SMPLify-X — more than 30 mm better on MPVPE and 15 mm on PA-MPJPE. The comparison evaluates the full pipeline and does not ablate individual components.
- Secure aggregation looks feasible. With MPC, runtime in the small-scale measurement was less than 2× that of plain federated training, which the authors call feasible enough to merit further system-level study.
Methodology in Plain English
The team built a simulated client-server testbed using the Flower library. Training data is chopped into disjoint shards, one per simulated user device; each round a handful of devices train briefly on their own shard and send only model weights to the server, which averages them. No images ever move. To mimic the messy real world they vary three things: how many devices exist (10 to 1000), how differently those devices' data are distributed (from near-uniform to heavily skewed by body type, scene, or source dataset), and which averaging algorithm the server uses. A separate secure-aggregation variant uses multi-party computation so the server cannot inspect any single device's update.
For the annotation half, they take an ordinary RGB image and run two parts of the Sapiens foundation model on it: one gives 2D joint locations, the other gives a relative depth map. A small linear regressor converts that relative depth into metric scale. They then fit a standard SMPL body mesh (6890 vertices) to these 2.5D cues by minimizing a combination of a 2D reprojection loss, pose and shape priors, an elbow/knee bending regularizer, an interpenetration penalty, and a scale-invariant logarithmic depth loss that compares predicted versus pseudo-ground-truth joint depths. Because the depth term is built from variances of log-depth differences, globally rescaling the depth barely changes it, so the fit emphasizes relative depth structure between joints rather than absolute scale.
Why This Matters
Research impact. The paper shifts HMR evaluation from an idealized centralized regime to a deployment-realistic one, and makes the pseudo-label dependency of privacy-constrained training explicit rather than hidden. It gives the community a reproducible harness and shows that federated training is not automatically damaging to HMR accuracy under the tested protocols.
Real-world applications:
- VR and AR — the personalization experiments use home VR gaming and an Oculus setting, where per-user body shape and room layout differ sharply.
- Human behavior analysis — passive sensing of pose and shape in homes or clinics, where shipping video off-device is the main barrier to adoption.
- Virtual try-on and retail — fitting garments to a customer's body without transmitting their images.
- Regulated deployments — GDPR-style compliance regimes where raw-image centralization is legally difficult or infeasible.
Industry relevance. The result that 1000 clients converge with only a 2–4 mm accuracy cost, and that MPC aggregation costs under 2× runtime at small scale, gives device makers and platform vendors a concrete feasibility signal. DePoser's use of a single RGB camera with no RGB-D, LiDAR, or multi-view rig is the practically important property for consumer hardware.
Future Directions
- Attack-based privacy evaluation. The authors explicitly do not run membership-inference, gradient-inversion, or model-inversion attacks, and do not claim formal differential privacy; they call these "important future extensions."
- HMR-aware aggregation strategies. The limitations section opens with this heading, signaling that generic FedAvg may not be the right aggregation rule for mesh regression.
- Isolating the source of heterogeneity gains. The hypothesis that skewed clients act as a meta-learning-like regularizer is unconfirmed and confounded with centralized-run variance and differing training budgets.
- Component ablation and independent ground truth for DePoser. The SMPLify-X comparison varies keypoint source, depth term, and depth alignment simultaneously, and the personalization numbers are measured against DePoser's own pseudo-labels rather than multi-view or marker-based capture.
- Broader architecture coverage and other paradigms. Only two transformer backbones are tested; split learning and FedSplit are named as alternatives with different communication, compute, and leakage trade-offs.
Target Audience
Researchers and engineers working on 3D human pose and shape estimation, federated and privacy-preserving machine learning, and on-device vision. It is most useful to those preparing to deploy HMR outside a lab — particularly teams that need to justify why user images stay on the device — and to benchmark designers looking for a reproducible harness. Readers without background in SMPL parameterizations or federated optimization will find the experimental tables legible but the method section demanding.
Authors’ abstract
Fine-tuning directly on user-side data is an effective way to improve the performance of widely adopted data-driven human mesh recovery (HMR) models. However, doing so for existing HMR methods often assumes aggregating user-side data from real-world HMR-deployed devices to a central training server, posing a significant privacy risk as sensitive human images are transmitted. How can human mesh recovery be evaluated and improved in privacy-constrained real-world settings? We study this question through a benchmark in which state-of-the-art HMR models are trained with federated learning and a secure-aggregation variant, neither of which centralizes raw images, and evaluated across a wide range of client-scale and data-heterogeneity settings. We document that common HMR training pipelines are built around centralized data access and quantify how representative HMR backbones behave when that assumption is removed. Furthermore, to study the data bottleneck of privacy-constrained HMR training, we propose DePoser, a local annotation and fine-tuning pipeline enhanced with depth foundation models, with which collaboratively trained HMR models can be locally tailored to the end user's distribution. On in-the-wild data, fine-tuning on DePoser annotations improves personalization accuracy, measured against DePoser-generated pseudo-ground truth. This benchmark aims to support future work on privacy-constrained HMR models and their real-world deployment and evaluation.