PDA

View Full Version : Apple explains how the iPhone's fingerprint sensor keeps your info secure



wraggster
February 28th, 2014, 00:06
http://o.aolcdn.com/hss/storage/adam/6a277b34b41260f2d47a32f53cb92956/iphone5s-touchid-630.jpg (http://www.engadget.com/2014/02/27/apple-touch-id-white-paper/)
If you've ever wanted to know how the iPhone 5s' Touch ID fingerprint security works beyond a basic overview, you'll be glad to hear Apple has just delivered a motherlode of new details. An updated version of its iOS Security white paper (PDF (http://images.apple.com/iphone/business/docs/iOS_Security_Feb14.pdf)) explains much of what happens to your finger data after you touch the sensor. In short, your information may be more hack-resistant than it seems at first glance. Each A7 chip has a unique secure space that neither the A7 nor Apple can read, and every authentication session is encrypted end-to-end. The company is also offering a deeper explanation of what it does with your fingerprint image, noting that the print only lasts in memory until it's turned into a decryption key. As we've known for a while (http://www.engadget.com/2013/09/11/iphone-5s-fingerprint-reader-extras/), there are safeguards that wipe out that key after 48 hours of inactivity, a reboot or five failed login attempts. While the new insights will only have so much usefulness when developers can't use Touch ID (http://www.engadget.com/2013/09/10/iphone-5s-fingerprint-devs/) for their own apps, they suggest that there's little to no chance of fingerprint theft or alarge-scale data breach (http://www.engadget.com/2014/01/29/justice-department-searches-for-culprits-behind-target-breach/).

http://www.engadget.com/2014/02/27/apple-touch-id-white-paper/