HACKINTOSH.ORG | Macintosh discussion forums

Apple details the security behind the Touch ID, and other news for Feb. 27, 2014

<!--CONTENT START--><p><img alt="touch id" data-credit="apple" data-mep="147777" src="http://o.aolcdn.com/hss/storage/adam/3224c8a6a01d81bad71fef71cd33d3ef/TouchID456.jpg" /></p>

<p>Apple has posted a document (http://images.apple.com/iphone/business/docs/iOS_Security_Feb14.pdf) to its business site (http://www.apple.com/iphone/business/it/) detailing the security features behind the Touch ID that was introduced on the iPhone 5s. This is the first time Apple has publicly revealed security features of the Touch ID, which could point to the fact that Apple may be considering opening up the fingerprint scanner to third-party developers at this year's WWDC. It's better to educate people beforehand on just how secure the technology is so that users will feel more comfortable when developers have access to it.</p>

<p>The highlight of the Touch ID security features appears to be the "Secure Enclave," which is a coprocessor in the A7 much the same way the M7 is a coprocessor. As MacRumors notes (http://www.macrumors.com/2014/02/26/touch-id-secure-enclave-document/):</p>

<p>Secure Enclave is a coprocessor within the A7 chip that uses a secure boot process to ensure that its separate software is both verified and signed by Apple. All Secure Enclaves can function independently even if a kernel is compromised and each one contains a unique ID inaccessible to other parts of the system and unknown to Apple, preventing the company or any other third parties from accessing data contained within....</p>

<p>Fingerprint data collected from Touch ID is stored within the Secure Enclave, which is used to determine a match and then enable a purchase. While the A7 processor collects data from the Touch ID sensor, it is unable to read it because it is encrypted and authenticated with a session key built into Touch ID and the Secure Enclave.</p>

<p>Given that the Touch ID seems much more secure than many thought, here's hoping Apple opens it up to third-party developers...just as Samsung has done with the new Galaxy S5.</p>

<p></p>

<p>In other news:</p>

<ul>
   <li>Apple has released a firmware update for the Mac Pro (http://support.apple.com/kb/DL1724?viewlocale=en_US&amp;locale=en_US) which allows the machine to enter Power Nap mode without running the fan.</li>
   <li>Apple has made sweeping changes (http://techcrunch.com/2014/02/26/apple-launches-big-improvements-for-ios-management-tools-for-enterprise-and-education/) to its iOS device management tools for Enterprise And Education.</li>
   <li>iOS 7.0.6, the version that fixed the SSL bug, has already been installed on 25% of iOS devices (http://chitika.com/insights/2014/ios-706-by-device) after just four days.</li>
</ul><p style="padding:5px;clear:both;">Apple details the security behind the Touch ID, and other news for Feb. 27, 2014 (http://www.tuaw.com/2014/02/27/apple-details-the-security-behind-the-touch-id-and-other-news-f/) originally appeared on Breaking Apple News, Tips and Reviews from The Unofficial Apple Weblog (http://www.tuaw.com) on Thu, 27 Feb 2014 12:00:00 EST.  Please see our terms for use of feeds (http://legal.aol.com/terms-of-service/full-terms/).<br style="clear:both;"></p><h6 style="clear: both; padding: 8px 0 0 0; height: 2px; font-size: 1px; border: 0; margin: 0; padding: 0;"></h6>Source (http://www.tuaw.com/tag/news-roundup)&nbsp;|&nbsp;<a href="http://www.tuaw.com/2014/02/27/apple-details-the-security-behind-the-touch-id-and-other-news-f/" rel="bookmark" title="Permanent link to this entry">Permalink[/url]&nbsp;|&nbsp;<a href="http://www.tuaw.com/forward/20839511/" title="Send this entry to a friend via email">Email this[/url]&nbsp;|&nbsp;<a href="http://www.tuaw.com/2014/02/27/apple-details-the-security-behind-the-touch-id-and-other-news-f/#comments" title="View reader comments on this entry">Comments[/url]

Source: Apple details the security behind the Touch ID, and other news for Feb. 27, 2014 (http://www.tuaw.com/2014/02/27/apple-details-the-security-behind-the-touch-id-and-other-news-f/)