Touch ID

Last updated
Logo used by Apple Touch ID logo.png
Logo used by Apple
Touch ID module of an iPhone 6s IPhone 6s - Touch ID front view-93104.jpg
Touch ID module of an iPhone 6s

Touch ID is an electronic fingerprint recognition feature designed and released by Apple Inc. that allows users to unlock devices, make purchases in the various Apple digital media stores (iTunes Store, App Store, and Apple Books Store), and authenticate Apple Pay online or in apps. It can also be used to lock and unlock password-protected notes on iPhone and iPad. Touch ID was first introduced in iPhones with the iPhone 5s in 2013. [1] In 2015, Apple introduced a faster second-generation Touch ID in the iPhone 6s; a year later in 2016, it made its laptop debut in the MacBook Pro integrated on the right side of the Touch Bar. Touch ID has been used on all iPads since the iPad Air 2 was introduced in 2014. In MacBooks, each user account can have up to three fingerprints, and a total of five fingerprints across the system. [2] Fingerprint information is stored locally in a secure enclave on the Apple A7 and later chips, not in the cloud, a design choice intended to secure fingerprint information from users or malicious attackers.

Contents

Touch ID was retained on iPhone 8, 2nd generation iPhone SE, 3rd generation iPhone SE, and the base model iPads, while all other iPhones since the iPhone X in 2017, and the higher-end iPad Pro have adopted Face ID recognition. Several iPads that do not have FaceID, such as the 4th, 5th, and 6th-generation iPad Air, 6th-generation iPad Mini, and the 10th-generation iPad, feature a new sleep/wake button with an integrated TouchID sensor.

In 2020, 2021 and 2022, Apple unveiled a new Magic Keyboard with optional Touch ID for its line of iMacs, Mac Studios, and Mac minis, and also the MacBook Pro.

History

The iPhone 5s (pictured) was the first model with a Touch ID sensor integrated with its home button. IPhone 5S home button.png
The iPhone 5s (pictured) was the first model with a Touch ID sensor integrated with its home button.

In 2012, Apple acquired AuthenTec, a company focused on fingerprint-reading and identification management software, for $356 million. [3] The acquisition led commentators to expect a fingerprint reading feature. [3] [4] Following leaks and speculation in early September the next year, [5] [6] the iPhone 5s was unveiled on September 10, 2013, and was the first phone on a major US carrier to feature the technology. [7] Apple's Vice President of Marketing, Phil Schiller, announced the feature at Apple's iPhone media event and spent several minutes (the major portion of the conference) discussing the feature.

Wells Fargo analyst Maynard Um predicted on September 4, 2013, that a fingerprint sensor in the iPhone 5s would help mobile commerce and boost adoption in the corporate environment. [8] "As consumers increasingly rely on mobile devices to transact and store personal data, a reliable device-side authentication solution may become a necessity," Um said. [8]

With the unveiling of the iPhone 6 and 6 Plus at a keynote event on September 9, 2014, Touch ID was expanded from being used to unlock the device and authenticating App Store purchases to also authenticating Apple Pay. The iPhone 6s incorporates a second-generation Touch ID sensor that is up to twice as fast as the first-generation sensor found in the 5s, 6, and SE (1st generation) phones. As of August 2022, the iPhone 6s, 6s Plus, 7, 7 Plus, 8, 8 Plus, SE (2nd generation), SE (3rd generation), 2016 and later MacBook Pro, 2018 and later MacBook Air, iPad Pro (2nd generation) and later, iPad Air (3rd generation) and later, and iPad mini (5th generation) or later are the Apple devices which use the second generation sensor. The new Touch ID unlocks almost instantly and posed an issue as it unlocks too fast to read notifications on the lock screen. This is remedied with the iOS 10 update in which a user must press the home button to have the home screen appear. This, however, can be changed in iOS settings so that users can go directly to the home screen after resting their finger on the sensor, similar to previous versions of iOS. Solely placing a finger on the sensor will only unlock the iPhone unless said setting is enabled, and no notifications are currently being displayed on the lock screen.

Generations

First generation

ModelAnnounced
iPhone 5s September 10, 2013
iPhone SE (1st generation) March 21, 2016
iPhone 6 & 6 Plus September 9, 2014
iPad Pro 12.9-inch [9] September 9, 2015
iPad Pro 9.7-inch [9] March 21, 2016
iPad Air 2 [9] October 16, 2014
iPad Mini 3
iPad Mini 4 [9] September 9, 2015
iPad (5th generation) March 24, 2017
iPad (6th generation) March 27, 2018
iPad (7th generation) September 10, 2019
iPad (8th generation) September 15, 2020
iPad (9th generation) September 14, 2021

Second generation

ModelAnnounced
iPhone 6s & 6s Plus September 9, 2015
iPhone 7 & 7 Plus September 7, 2016
iPhone 8 & 8 Plus September 12, 2017
iPad Pro (2nd generation) June 5, 2017
iPad Air (3rd generation) March 18, 2019
iPad Mini (5th generation)
iPhone SE (2nd generation) April 15, 2020
iPhone SE (3rd generation) March 8, 2022
MacBook Pro (13-inch, 2016, Four Thunderbolt 3 ports) October 27, 2016
MacBook Pro (15-inch, 2016)
MacBook Pro (13-inch, 2017, Four Thunderbolt 3 ports) June 5, 2017
MacBook Pro (15-inch, 2017)
MacBook Pro (13-inch, 2018, Four Thunderbolt 3 ports) July 12, 2018
MacBook Pro (15-inch, 2018)
MacBook Air (Retina, 13-inch, 2018) October 30, 2018
MacBook Pro (13-inch, 2019, Four Thunderbolt 3 ports) May 21, 2019
MacBook Pro (15-inch, 2019)
MacBook Air (Retina, 13-inch, 2019) July 9, 2019
MacBook Pro (16-inch, 2019) November 13, 2019
MacBook Air (Retina, 13-inch, 2020) March 18, 2020
MacBook Pro (13-inch, 2020, Four Thunderbolt 3 ports) May 4, 2020
MacBook Air (M1, 2020) November 10, 2020
MacBook Pro (13-inch, M1, 2020)
MacBook Pro (14-inch, 2021) October 18, 2021
MacBook Pro (16-inch, 2021)
iMac (24-inch, M1, 2021) Apr 20, 2021
Magic Keyboard with Touch ID
Magic Keyboard with Touch ID and Numeric Keypad
MacBook Air (M2, 2022) June 6, 2022
MacBook Pro (M2, 2022)
MacBook Pro (14-inch, 2023) January 17, 2023
MacBook Pro (16-inch, 2023)
MacBook Air (15-inch, M2, 2023) June 5, 2023
iMac (24-inch, M3, 2023) October 30, 2023
MacBook Pro (14-inch, Nov 2023)
MacBook Pro (16-inch, Nov 2023)
MacBook Air (13-inch, M3, 2024) March 4, 2024
MacBook Air (15-inch, M3, 2024)

Third generation

ModelAnnounced
iPad Air (4th generation) September 15, 2020
iPad mini (6th generation) September 14, 2021
iPad Air (5th generation) March 8, 2022
iPad (10th generation) October 18, 2022
iPad Air (6th generation) May 7, 2024

Hardware

Components of Touch ID TouchID components.png
Components of Touch ID

Touch ID is built into the home (top) button, which is built of laser-cut [10] sapphire crystal, and does not scratch easily (scratching would prevent Touch ID from working). [11] It features a stainless steel detection ring to detect the user's finger without pressing it. There is no longer a rounded square icon in the home button, nor is it concave.

The sensor uses capacitive touch to detect the user's fingerprint. [11] The sensor has a thickness of 170  μm, with 500 pixels per inch resolution. The user's finger can be oriented in any direction and it will still be read. [3] Apple says it can read sub-epidermal skin layers, [12] and it will be easy to set up and will improve with every use. [10] The sensor passes a small current through one's finger to create a "fingerprint map" of the user's dermis. Up to 5 fingerprint maps can be stored in the Secure Enclave.

Security and privacy

OneDrive, Touch ID.png
Microsoft Outlook, Touch ID.png
Touch ID prompts on opening screens of the Microsoft applications: OneDrive (left) and Outlook (right) in iOS 11

Touch ID can be bypassed using passcodes set up by the user. [13]

Fingerprint data is stored on the secure enclave inside the Apple A7 and later processors of iOS devices, the T1 and T2 on Intel Macs, and the M1 and later on Macs with Apple Silicon and recent iPads featuring M-series processors. This data is not on Apple servers, nor on iCloud, and is not accessible by Apple or any third parties. [14] From the Efficient Texture Comparison patent [15] covering Apple's Touch ID technology:

In order to overcome potential security drawbacks, Apple's invention includes a process of collapsing the full maps into a sort of checksum, hash function, or histogram. For example, each encrypted ridge map template can have some lower resolution pattern computed and associated with the ridge map. One exemplary pattern could be a histogram of, e.g., the most common angles (e.g., a 2 dimensional (2D) array of common angles). The exemplary pattern could include in each slot an average value over a respective vector of the map. The exemplary pattern could include in each slot a sum of the values over a respective vector of the map. The exemplary pattern could include the smallest or largest value within a respective vector of the map or could be a difference between a largest and a smallest value within the respective vector of the map. Numerous other exemplary embodiments are also possible, and any other exemplary pattern calculation can be used, where the exemplary pattern includes enough associated information to narrow the candidate list, while omitting enough associated information that the unsecured pattern cannot or cannot easily be reverse engineered into a matching texture.

If the user's phone has been rebooted, has not been unlocked for 48 hours, has its SIM card removed or has Emergency SOS activated, only the passcode a user has created, not their fingerprint, can be used to unlock the device or during other specific use cases. [16] [17]

In September 2013, the German Chaos Computer Club announced that it had bypassed Apple's Touch ID security. A spokesman for the group stated: "We hope that this finally puts to rest the illusions people have about fingerprint biometrics. It is plain pity to use something that you can't change and that you leave everywhere every day as a security token." [18] [19] Similar results have been achieved by using PVA Glue to take a cast of the finger. [20] Others have also used Chaos Computer Club's method but concluded that it is not an easy process in either time or effort, given that the user has to use a high resolution photocopy of a complete fingerprint, special chemicals, and expensive equipment and because the spoofing process takes some time to achieve. [21]

Impact

In a 2013 New York magazine opinion piece, technology columnist Kevin Roose argued that consumers are generally not interested in fingerprint recognition, preferring to use passcodes instead. Traditionally, he wrote, only businesspeople used biometric recognition, although they believe Touch ID may help bring fingerprint recognition to the masses. Roose stated the feature will also allow application developers to experiment, should Apple open up access to Touch ID later on (which they have done), but that those wary of surveillance agencies such as the US National Security Agency may still choose not to use Touch ID. [22]

Roose also noted that fingerprint technology still has some issues, such as the potential to be hacked, or of the device's not recognizing the fingerprint (for example, when the finger has been injured). [22]

Adrian Kingsley-Hughes, writing for ZDNet, said Touch ID could be useful in bring your own device situations. He said the biometric protection adds another layer of security, removing the ability of people to look over others' shoulders and read their passcode/password. He added that Touch ID would prevent children from racking up thousands of dollars in unwanted purchases when using iPhones owned by adults. He observed that Touch ID was Apple's response to the large number of iPhone crimes, and that the new feature would deter would-be iPhone thieves. Moreover, he notes that the feature is one of the few that distinguish the iPhone 5S from the 5C. [23]

Roose also stated the feature is intended to deter theft. [22] However, Brent Kennedy, a vulnerability analyst at the United States Computer Emergency Readiness Team, expressed concern that Touch ID could be hacked and suggested that people not rely on it right away. [24] Forbes noted a history of fingerprints being spoofed in the past, and cautioned that the fingerprints on a stolen iPhone might be used to gain unauthorized access. However, the article did say that biometrics technology had improved since tests on spoofing fingerprint readers had been conducted. [24]

Kingsley-Hughes suggested the Touch ID as a form of two-factor authentication, combining something one knows (the password) with "something you are" (the fingerprint). [23] Forbes said that, if two-factor authentication is available, it will be an overall improvement for security. [24]

Forbes columnist Andy Greenberg said the fact that fingerprint data was stored on the local device and not in a centralized database was a win for security. [25]

See also

Related Research Articles

Synaptics Incorporated is a publicly traded San Jose, California-based developer of human interface (HMI) hardware and software, including touchpads for computer laptops; touch, display driver, and fingerprint biometrics technology for smartphones; and touch, video and far-field voice technology for smart home devices and automotives. Synaptics sells its products to original equipment manufacturers (OEMs) and display manufacturers.

iPhone Line of smartphones by Apple Inc.

The iPhone is a smartphone produced by Apple that uses Apple's own iOS mobile operating system. The first-generation iPhone was announced by then–Apple CEO Steve Jobs on January 9, 2007. Since then, Apple has annually released new iPhone models and iOS updates. As of November 1, 2018, more than 2.2 billion iPhones had been sold.

iOS Mobile operating system by Apple

iOS is a mobile operating system developed by Apple exclusively for its smartphones. It was unveiled in January 2007 for the first-generation iPhone, launched in June 2007.

iOS is a mobile operating system developed by Apple Inc. and was first released as iPhone OS in June 2007, coinciding with the launch of the first generation iPhone. iPhone OS was renamed iOS following the release of the iPad, starting with iOS 4. With iOS 13, Apple began offering a separate operating system, iPadOS, for the iPad. iOS is also the foundation of the newer audioOS and tvOS, and shares some of its code with macOS. New iOS versions are released every year alongside new iPhone models. From its launch in 2007 until 2010, this occurred in June or July, since then, new major versions are released in September or October. Since the launch of the iPhone in June 2007, there have been 17 major releases of iOS. The current major version of iOS is iOS 17, released on September 18, 2023.

iPhone 5s Smartphone made by Apple (2013–2016)

The iPhone 5s is a smartphone that was designed, developed, and marketed by Apple Inc. It is the seventh generation of the iPhone, succeeding the iPhone 5, and unveiled in September 2013, alongside the iPhone 5c.

IDEX Biometrics ASA is a Norwegian biometrics company, specialising in fingerprint imaging and fingerprint recognition technology. The company was founded in 1996 and is headquartered in Oslo, but its main operation is in the US, with offices in New York and Massachusetts. The company also has offices in the UK and China.

<span class="mw-page-title-main">Smudge attack</span> Discerning a password via screen smudges

A smudge attack is an information extraction attack that discerns the password input of a touchscreen device such as a cell phone or tablet computer from fingerprint smudges. A team of researchers at the University of Pennsylvania were the first to investigate this type of attack in 2010. An attack occurs when an unauthorized user is in possession or is nearby the device of interest. The attacker relies on detecting the oily smudges produced and left behind by the user's fingers to find the pattern or code needed to access the device and its contents. Simple cameras, lights, fingerprint powder, and image processing software can be used to capture the fingerprint deposits created when the user unlocks their device. Under proper lighting and camera settings, the finger smudges can be easily detected, and the heaviest smudges can be used to infer the most frequent input swipes or taps from the user.

A lock screen is a computer user interface element used by various operating systems. They regulate immediate access to a device by requiring the user to perform a certain action in order to receive access, such as entering a password, using a certain button combination, or performing a certain gesture using a device's touchscreen. There are various authentication methods to get past the lock screen, with the most popular and common ones being personal identification numbers (PINs), the Android pattern lock, and biometrics.

iPad Air (1st generation) Tablet computer made by Apple (2013–2016)

The iPad Air is a tablet designed, developed, and marketed by Apple Inc. It was announced on October 22, 2013, and was released on November 1, 2013. Part of the iPad line of tablet computers, the iPad Air features a thinner design than its predecessors, with similarities to the contemporaneous iPad Mini 2.

iPad Mini 2 Tablet computer made by Apple (2013–2017)

The iPad Mini 2 is a tablet computer produced and marketed by Apple Inc. It has a nearly identical design to its predecessor, the first-generation iPad Mini, but features internal revisions such as the use of an A7 system-on-a-chip and a 2,048 x 1,536 resolution Retina Display. Internally, the second-generation iPad Mini has nearly the same hardware as its sibling device, the iPad Air. Apple released the second-generation iPad Mini in space gray and silver colors on November 12, 2013.

iPad Air 2 Tablet computer made by Apple (2014–2017)

The iPad Air 2 is the second-generation iPad Air tablet computer designed, developed, and marketed by Apple Inc. It was announced on October 16, 2014, alongside the iPad Mini 3, both of which were released on October 22, 2014. The iPad Air 2 is thinner, lighter and faster than its predecessor, the first-generation iPad Air, and features Touch ID with the height, width and screen size the same as the iPad Air.

iPad Mini 3 Tablet computer made by Apple (2014–2015)

The iPad Mini 3 is the third-generation iPad Mini tablet computer designed, developed and marketed by Apple Inc. It was announced alongside the iPad Air 2 on October 16, 2014 and released on October 22. It uses primarily the same design and hardware as that of its predecessor, the iPad Mini 2. Its new features are the addition of the Touch ID sensor compatible with Apple Pay, differing storage sizes and being available in a gold color, as well as the previous colors.

iOS 9 2015 mobile operating system

iOS 9 is the ninth major release of the iOS mobile operating system developed by Apple Inc., being the successor to iOS 8. It was announced at the company's Worldwide Developers Conference on June 8, 2015, and was released on September 16, 2015. It was succeeded by iOS 10 on September 13, 2016.

iPhone X 2017 eleventh-generation smartphone designed by Apple Inc.

The iPhone X is a smartphone designed, developed and marketed by Apple. It is part of the 11th generation of the iPhone. Available for pre-order from October 27, 2017, it was released on November 3, 2017. The naming of the iPhone X marked the 10th anniversary of the iPhone.

<span class="mw-page-title-main">Face ID</span> Facial recognition system by Apple

Face ID is a biometric authentication facial recognition system designed and developed by Apple Inc. for the iPhone and iPad Pro. The system can be used for unlocking a device, making payments, accessing sensitive data, providing detailed facial expression tracking for Animoji, as well as six degrees of freedom (6DOF) head-tracking, eye-tracking, and other features. Initially released in November 2017 with the iPhone X, it has since been updated and introduced to all iPhones outside of SE models and all iPad Pro models from 2018 onwards. Users on iOS 18 and newer can choose to lock specific apps, requiring Face ID to access them.

iOS 12 2018 mobile operating system

iOS 12 is the twelfth major release of the iOS mobile operating system developed by Apple. Aesthetically similar to its predecessor, iOS 11, it focuses more on performance than on new features, quality improvements and security updates. Announced at the company's Worldwide Developers Conference on June 4, 2018, iOS 12 was released to the public on September 17, 2018. It was succeeded for the iPhone and iPod Touch by iOS 13 on September 19, 2019, and for the iPad by iPadOS 13 on September 24, 2019. Security updates for iOS 12 continued for four years after the releases of iOS 13 and iPadOS 13 for devices unable to run the newer versions. The last update, 12.5.7, was released on January 23, 2023.

The iOS mobile operating system developed by Apple has had a wide range of bugs and security issues discovered throughout its lifespan, including security exploits discovered in most versions of the operating system related to the practice of jailbreaking, bypassing the user's lock screen, issues relating to battery drain, crash bugs encountered when sending photos or certain Unicode characters via text messages sent through the Messages application, and general bugs and security issues later fixed in newer versions of the operating system.

iPhone 12 Pro 14th-generation smartphone by Apple Inc.

The iPhone 12 Pro and iPhone 12 Pro Max are smartphones designed, developed, and marketed by Apple Inc. They are the flagship smartphones in the fourteenth generation of the iPhone, succeeding the iPhone 11 Pro and iPhone 11 Pro Max, respectively. They were unveiled alongside the iPhone 12 and iPhone 12 Mini at an Apple Special Event at Apple Park in Cupertino, California on October 13, 2020, with the iPhone 12 Pro being released on October 23, 2020, and the iPhone 12 Pro Max on November 13, 2020. They were discontinued on September 14, 2021, along with the iPhone XR, following the announcement of the iPhone 13 and iPhone 13 Pro.

The iPhone's hardware is designed by Apple Inc. Apple directly sub-contracts hardware production to external OEM companies, maintaining a high degree of control over the end product.

The iOS operating system utilizes many security features in both hardware and software, from the boot process to biometrics.

References

  1. "Everything you need to know about iPhone 5S's Touch ID fingerprint sensor". iPhone Hacks | #1 iPhone, iPad, iOS Blog. 2013-09-10. Retrieved 2020-12-07.
  2. "About Touch ID advanced security technology". Apple Support. 11 September 2017.
  3. 1 2 3 Rosenblatt, Seth (September 10, 2013). "iPhone 5S comes with Touch ID fingerprint scanner". CNET . Retrieved September 11, 2013.
  4. Valazco, Chris (September 11, 2013). "Apple's Touch ID Is A 500ppi Fingerprint Sensor Built Into The iPhone 5S Home Button". TechCrunch . Retrieved September 11, 2013.
  5. "iPhone 5S: Une photo du bouton Home avec lecteur d'empreintes digitales?!" [iPhone 5S: A photo of the Home button with fingerprint reader?!] (in French). NowhereElse. September 3, 2013. Retrieved September 11, 2013.
  6. "iPhone 5S: Le lecteur d'empreintes digitales confirmé?!" [iPhone 5S: The fingerprint reader confirmed ?!] (in French). NowhereElse. September 10, 2013. Retrieved September 11, 2013.
  7. Newton, Casey (September 10, 2013). "Apple's new iPhone will read your fingerprint". The Verge . Retrieved September 11, 2013.
  8. 1 2 Hughes, Neil (September 4, 2013). "Fingerprint sensor in Apple's 'iPhone 5S' predicted to boost mobile commerce, enterprise adoption". AppleInsider . Retrieved September 11, 2013.
  9. 1 2 3 4 "iPad - Compare Models - Apple". apple. 2017-02-01. Archived from the original on February 1, 2017. Retrieved 2020-06-15.
  10. 1 2 "Apple Announces iPhone 5S - The Most Forward-Thinking Smartphone in the World". The Wall Street Journal . September 10, 2013. Archived from the original on September 13, 2013. Retrieved September 11, 2013.
  11. 1 2 "Apple announces iPhone 5S: Touch ID fingerprint security, 64-bit A7 CPU, new gold option coming Sept. 20". AppleInsider. September 10, 2013. Retrieved September 11, 2013.
  12. Gilbert, Ben (September 10, 2013). "iPhone 5s fingerprint sensor called Touch ID, recognizes your thumb on the Home button: here's how it works and what it does". Engadget . Retrieved September 11, 2013.
  13. "Use a passcode with your iPhone, iPad, or iPod touch". 28 March 2022.
  14. "Privacy - Control - Touch ID and Face ID". Apple. Retrieved 2024-08-22.
  15. "Efficient Texture Comparison". Digital. US Patent & Trademark Office. May 18, 2012. Retrieved November 21, 2013.
  16. "Apple: New iPhone Not Storing Fingerprints, Doesn't Like Sweat". Digital. The Wall Street Journal. September 11, 2013. Retrieved September 11, 2013.
  17. "iOS Security Guide" (PDF). Apple Inc. March 2017. Archived from the original (PDF) on March 19, 2015. Retrieved March 26, 2017.
  18. Rieger, Frank (September 21, 2013). "Chaos Computer Club breaks Apple Touch ID". Chaos Computer Club . Retrieved September 21, 2013.
  19. Musil, Stephen (September 22, 2013). "Hackers claim to have defeated Apple's Touch ID print sensor". CNet . CBS Interactive Inc. Retrieved September 23, 2013.
  20. Rogers, Marc (September 23, 2013). "Why I Hacked Apple's TouchID, And Still Think It Is Awesome". Lookout. Archived from the original on March 24, 2016. Retrieved September 23, 2013.
  21. "Why I hacked Touch ID (Again) and still think it's awesome". Archived from the original on 2017-07-03. Retrieved 2017-05-23.
  22. 1 2 3 Roose, Kevin (September 10, 2013). "Will the New iPhone's 'Touch ID' Feature Finally Make Fingerprint Scanning Happen?". New York . Retrieved September 11, 2013.
  23. 1 2 Kingsley-Hughes, Adrian (September 10, 2013). "iPhone 5S with Touch ID is a big win for BYOD security". ZDNet . Retrieved September 11, 2013.
  24. 1 2 3 Greenberg, Andy (September 10, 2013). "Apple's New iPhone 'Touch ID' Makes Fingerprint Scans Easy, But Don't Ditch Passcodes Yet". Forbes . Retrieved September 11, 2013.
  25. Steinberg, Joseph (September 13, 2013). "Your New iPhone Can Put Your Identity At Risk". Forbes . Retrieved July 5, 2014.