Preserving privacy by de-identifying facial images
on the design and quantification of privacy preserving data mining algorithms .