Jess Bolluyt More Articles April 25, 2016 Everyone is talking about how Apple’s future iPhones can become safer thanks to the efforts that the company is making right now, but learning to use existing features such as Touch ID can be an important part of making sure that your iPhone or iPad is as safe as possible. While using it to unlock your iPhone or iPad, you can also use the Touch ID to accept purchases from the iTunes Store or the iBooks App app store. Apple Pay can also use the Touch ID and third-party applications can use Apple APIs to ask you to authenticate using Touch ID or passcode. In that case, the device will only be informed of whether authentication is effective or not; it can not access the Touch ID or your fingerprint information. The Settings app helps you to monitor your Touch ID settings, where you can also add up to five fingerprints or uninstall fingerprints.
How Touch ID works
Touch ID George Frey / Getty Images To allow you to unlock your iPhone or iPad with Touch ID, your smartphone contains a Secure Enclave coprocessor that has been built to secure your passcode and fingerprint data and is inaccessible to other system components. Fingerprint data is encrypted and secured with a key only accessible for the Secure Enclave, and the Secure Enclave is separate from the rest of the chip and the rest of the iOS device. Placing your finger on the home button will activate an imaging array for scanning your finger and sending the scan to the Secure Enclave. As Apple explains: The Secure Enclave is responsible for processing Touch ID sensor fingerprint data to determine if there is a match against registered fingerprints and then allowing user access or purchases. Communication happens over a serial peripheral interface bus between the processor and the Touch ID sensor. The processor forwardes the data to the Secure Enclave but is unable to read them. It is encrypted and authenticated with a session key negotiated using the shared system key given for both the Touch ID sensor and the Protected Enclave. If the Touch ID is switched off then the “Full” Data Protection Class keys stored in the Secure Enclave are discarded when the device locks. The files and keychain objects in that class are inaccessible before you insert your passcode to unlock the computer. Once Touch ID is switched on, the keys will not be discarded once the unit locks and instead will be wrapped with a key within the Secure Enclave which is issued to the Touch ID subsystem. If you try to unlock the app, and the Touch ID recognizes your fingerprint, it offers the key to unwrap the Data Protection keys and unlock the device. When the system reboots and is discarded by the Secure Enclave after 48 hours or five failed attempts to recognize the Touch ID, the keys needed for the Touch ID to unlock the device are lost. As Apple describes the Touch ID sensor is only activated when a finger is detected by the capacitive steel ringing around the home button. That activates an array of images that scans your finger and sends the resulting image to the Secure Enclave. Within the Secure Enclave, the sample is briefly stored in encrypted memory as it is vectorized for study, and then discarded. The analysis uses mapping of the subdermal ridge flow angle which discards some of the data required to reconstruct your actual fingerprint. The resulting map is stored in an encrypted format that can only be read by the Secure Enclave, without any identity information. More from Cheat Sheet Gear Style: iPhone 7 Release Date Price Features: Can you trust the rumors? How to update an iPhone