Touch ID

From Infogalactic: the planetary knowledge core
Jump to: navigation, search

Touch ID is a fingerprint recognition feature, designed and released by Apple Inc., and is currently available on the iPhone 5S, iPhone 6, iPhone 6+, iPhone 6S, iPhone 6S+, iPhone SE, iPad Air 2, iPad Mini 3, iPad Mini 4, iPad Pro and iPad Pro 9.7

On September 19, 2015, Apple introduced the second generation Touch ID, which is twice as fast as the first generation sensor.

Apple says Touch ID is heavily integrated into iOS devices, allowing users to unlock their device, as well as make purchases in the various Apple digital media stores (iTunes Store, the App Store, iBookstore), and to authenticate Apple Pay online or in apps. On announcing the feature, Apple made it clear that the fingerprint information is stored locally in a secure enclave on the Apple A7 and later chips, rather than being stored remotely on Apple servers or in iCloud, making it very difficult for external access.

History

The first mobile phone with a fingerprint scanner was the Motorola Mobility Atrix 4G in 2011.[citation needed] The iPhone 5S unveiled on September 10, 2013 was the first phone on a major US carrier since then to feature the technology.[1] Following Apples introduction in 2013, most other smartphone makers included fingerprint scanning in their high-end phones during 2014 and 2015,[2] starting with the Samsung Galaxy Alpha 4G. With Android 6.0 (Android Marshmallow, released October 2015) they can now also be integrated into the operating system like Touch ID is in iOS.

In 2012, Apple acquired AuthenTec, a company focused on fingerprint reading and identification management software, for $356 million.[3] The acquisition led commentators to expect a fingerprint reading feature.[3][4]

A leak on September 3, 2013, suggested that the feature would be coming to the iPhone,[5] while an alleged user guide showing the feature leaked just hours before the announcement came.[6] Wells Fargo analyst Maynard Um predicted on September 4, 2013, that a fingerprint sensor in the iPhone 5S would help mobile commerce and boost adoption in the corporate environment.[7] "As consumers increasingly rely on mobile devices to transact and store personal data, a reliable device-side authentication solution may become a necessity," Um said.[7]

Apple's Vice President of Marketing, Phil Schiller, announced the feature at Apple's iPhone media event on September 10, 2013,[4] spending several minutes (the last major portion of the conference) discussing the feature.

The iPhone 6s incorporates an even faster second-generation Touch ID fingerprint sensor that is up to twice as fast as the older, first-generation sensor found in the 5S, 6, and SE phones. The new sensor unlocks almost instantly and may even be a problem as it unlocks too fast to read notifications on the lock screen.

USAA has released their figures and as of the end of 2015 over one-million members are using Apple's Touch ID, utilizing their fingerprint to securely log on to the USAA Mobile Application on Apple's iPhones and iPads.[19]

Generations

Generation Model
1
2

Hardware

File:TouchID components.png
Components of Touch ID.

Touch ID is built into the home button, which is built of laser-cut[8] sapphire crystal, which does not scratch (scratching would prevent Touch ID from working).[9] It features a stainless steel detection ring to detect the user's finger without pressing it. The feature does not work without contact with this ring. There is no longer a 'squircle' icon in the home button, nor is it concave.

The sensor uses capacitive touch to detect the user's fingerprint.[9] The sensor has a thickness of 170 µm, with 500 pixels per inch resolution. The user's finger can be oriented in any direction and it will still be read.[3] Apple says it can read sub-epidermal skin layers,[10] and it will be easy to set up and will improve with every use.[8] The sensor passes a small current through one's finger to create a "fingerprint map" of the user's dermis. Up to 5 fingerprint maps can be stored in the Secure Enclave.

Security and privacy

Touch ID can be bypassed using passcodes,[11] thus on account of it presenting a new different way for access to the device, it represents a net security decrease for an individual device. Apple claims that average user security is increased however because users who formerly had no passcode at all will now use Touch ID. Fingerprint data is stored on the secure enclave of the Apple A7, A8, A8X, A9, or A9X chip of the device itself, and is not stored on Apple servers, nor on iCloud. From the Efficient Texture Comparison patent[12] covering Apple's TouchID: "In order overcome potential security drawbacks, Apple's invention includes a process of collapsing the full maps into a sort of checksum, hash function, or histogram. For example, each encrypted ridge map template can have some lower resolution pattern computed and associated with the ridge map. One exemplary pattern could be a histogram of, e.g., the most common angles (e.g., a 2 dimensional (2D) array of common angles). The exemplary pattern could include in each slot an average value over a respective vector of the map. The exemplary pattern could include in each slot a sum of the values over a respective vector of the map. The exemplary pattern could include the smallest or largest value within a respective vector of the map, or could be a difference between a largest and a smallest value within the respective vector of the map. Numerous other exemplary embodiments are also possible, and any other exemplary pattern calculation can be used, where the exemplary pattern includes enough associated information to narrow the candidate list, while omitting enough associated information that the unsecured pattern cannot or cannot easily be reverse engineered into a matching texture."

[4][10] If the user's phone has been rebooted, or has not been unlocked for 48 hours, only the user's passcode, not a fingerprint, can be used to unlock the device.[11]

In September 2013, the German Chaos Computer Club announced that it had bypassed Apple's Touch ID security. A spokesman for the group stated: "We hope that this finally puts to rest the illusions people have about fingerprint biometrics. It is plain stupid to use something that you can't change and that you leave everywhere every day as a security token."[13][14] Similar results have been achieved by using PVA Glue to take a cast of the finger.[15]

Impact

In an opinion piece New York Magazine in 2013 assumed that consumers are generally not interested in fingerprint recognition, preferring to use passcodes instead. Traditionally, they said, only businesspeople such as Bloomberg employees used biometric recognition, although they believe Touch ID may help bring fingerprint recognition to the masses. The magazine said the feature will also allow application developers to experiment, should Apple open-up access to Touch ID later on, which they have done.[16]

New York Magazine also noted that complementary metal oxide semiconductor (CMOS) sensors such as those found on Touch ID generally wear out and become unusable after some period of time. The magazine said that while Apple may have found a way to manufacture the sensors better, if they stop working, users may just switch back to using their passcode, making fingerprint recognition a non-starter once again. It also notes that fingerprint technology still has some issues, such as the potential to be hacked, or of the device not recognizing the fingerprint (for example when the finger has been injured).[16]

Adrian Kingsley-Hughes, writing for ZDNet, said Touch ID could be useful in bring your own device situations. He said that the biometric protection adds another layer of security, removing the ability of people to look over the shoulders of others and read their passcode/password. He added that Touch ID would prevent children from racking up thousands of dollars in unwanted purchases when using iPhones owned by adults. The author said that Touch ID was Apple's response to the large number of iPhone crimes, and that the new feature would deter would-be iPhone thieves. He notes that the feature is one of the few that distinguish the iPhone 5S from the 5C.[17] New York Magazine said the feature is intended to deter theft.[16] Brent Kennedy, a vulnerability analyst at the United States Computer Emergency Readiness Team, expressed concern that Touch ID could be hacked and suggested that people not rely on it right away.[18] Forbes noted a history of fingerprints being spoofed in the past, and noted that the fingerprints on a stolen iPhone might be used to gain unauthorized access. However, it did say that biometrics technology had improved since tests on spoofing fingerprint readers had been conducted.[18]

Galaxkey was the first company to deploy encrypted email using Touch ID and thus implement two-factor authentication on an iOS device. They noted that the fingerprints could be used to gain authorized access to email and files on Touch ID-enabled devices.[18]

ZDNet suggested the Touch ID as a form of two-factor authentication, whereby something one knows (the password) with something one is (the fingerprint).[17] Forbes said that, if two-factor authentication is available, it will be an overall improvement for security.[18]

Forbes columnist, Andy Greenberg, said the fact that fingerprint data was stored on the local device and not in a centralized database was a win for security.[19]

New York Magazine noted that those wary of surveillance agencies such as the US National Security Agency may still choose not to use Touch ID.[16]

References

  1. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  2. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  3. ↑ 3.0 3.1 3.2 Lua error in package.lua at line 80: module 'strict' not found.
  4. ↑ 4.0 4.1 4.2 Lua error in package.lua at line 80: module 'strict' not found.
  5. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  6. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  7. ↑ 7.0 7.1 Lua error in package.lua at line 80: module 'strict' not found.
  8. ↑ 8.0 8.1 Lua error in package.lua at line 80: module 'strict' not found.
  9. ↑ 9.0 9.1 Lua error in package.lua at line 80: module 'strict' not found.
  10. ↑ 10.0 10.1 Lua error in package.lua at line 80: module 'strict' not found.
  11. ↑ 11.0 11.1 Lua error in package.lua at line 80: module 'strict' not found.
  12. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  13. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  14. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  15. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  16. ↑ 16.0 16.1 16.2 16.3 Lua error in package.lua at line 80: module 'strict' not found.
  17. ↑ 17.0 17.1 Lua error in package.lua at line 80: module 'strict' not found.
  18. ↑ 18.0 18.1 18.2 18.3 Lua error in package.lua at line 80: module 'strict' not found.
  19. ↑ Lua error in package.lua at line 80: module 'strict' not found.

External links

Retrieved from "https://infogalactic.com/w/index.php?title=Touch_ID&oldid=721565120"