SAGE: Efficient Protected Vision-Language Inference on Smart Glasses
cs.CR, cs.AI, cs.CE
Submitted: 2026-10-08
Updated: 2026-10-08
Comments: 18 pages, 9 figures
License: http://creativecommons.org/licenses/by/4.0/
The gist: Smart glasses are a promising platform for vision-language assistants, but private split inference remains expensive: protecting visual representations before transmission does not remove the cost of
Abstract
Smart glasses are a promising platform for vision-language assistants, but private split inference remains expensive: protecting visual representations before transmission does not remove the cost of on-device vision encoding, wide protected tokens, or hardware-unaware execution. We present SAGE (Smart-glasses-Aware Guarded Encoding), a hardware-aware framework for efficient protected VLM inference on smart glasses. SAGE keeps raw images and unprotected visual tokens on the trusted device, reduces visual input cost, executes shape-specialized INT8 graphs, and compresses protected representations into compact 256-dimensional INT8 packets before transmission. Unlike efficiency methods optimized only for nominal model size, SAGE selects its operating point using downstream answer quality together with measured latency, memory, and thermal behavior on real Mentra Live glasses. On a matched Qwen workload, SAGE reduces glasses inference latency by 39.18%, device-sensor temperature rise by 21.91%, and protected packet size by 96.56%, while retaining 85.62% of the protected reference's relaxed utility and comparable prompted containment. Direct glasses-to-phone tests deliver all 192 packets and reduce median packet-plus-acknowledgment time from 71.3 to 10.0 ms. The compact protected interface also transfers across four additional VLM families. These results show that private wearable VLM inference must be optimized jointly across representation protection, communication, and real-device execution rather than through model compression alone.
Sources
- Token Merging: Your ViT But Faster
- Censoring Representations with an Adversary
- Who Can See Through You? Adversarial Shielding Against VLM-Based Attribute Inference Attacks
- Deep Compression: Compressing Deep Neural Networks with Pruning, Trained Quantization and Huffman Coding
- MobileNets: Efficient Convolutional Neural Networks for Mobile Vision Applications
- LoRA: Low-Rank Adaptation of Large Language Models
- Defending Wearable VLMs Against Private Attribute Inference
- TOFU: A Task of Fictitious Unlearning for LLMs
- Switch-KD: Visual-Switch Knowledge Distillation for Vision-Language Models
- Qwen2-VL: Enhancing Vision-Language Model's Perception of the World at Any Resolution
- MiniCPM-V: A GPT-4V Level MLLM on Your Phone
Related papers
- SoK: AI-Augmented Binary Reversing
- Relaxed Sender Anonymity for CBDC Interbank Settlement: A Zero-Knowledge Approach on Permissioned EVM
- Calibration-Family Overfit: Why Trusted Sabotage Monitors Don't Transfer Across Lineages
- Estimating the Social Cost of Corporate Data Breaches
- Efficient Fuzzy PSI under One-Sided Assumptions
- Sealing the Audit-Runtime Gap for LLM Skills