Apple’s Brand New iPhone 5s hit the US Market on 20th September 2013. One of the biggest features of the iPhone 5s is its Touch ID fingerprint sensor which makes it much easier to secure the device by using the owner’s fingerprint.
The fingerprint is not just used for unlocking the iPhone, but it can be optionally used for the iTunes account which stores the user’s credit card information. So, it is critical that the Touch ID functions properly so that it canrestrict unauthorized access.
As you compare the security features of new iPhone 5s with its elder brother iPhone 5, the Touch ID is the only difference. In addition to the Touch ID, the user needs to enter a pin or a password to unlock the device. The Device Design , Screen size, resolution, storage, build are the same in iPhone 5 & 5s. Where iPhone 5 had the A6 processor, iPhone 5s comes with the a 64 bit A7 chip that Apple says is twice as fast as the A6. Additionally, this is the first 64-bit processor in a smart phone.
Does Everyone use a Passcode ?
The Answer is No. Not every user uses the Pass code It is said that over 50% of users do not use a passcode even though it is available in their smart phones.
Apple developed Touch ID which accepts your fingerprint as a pass code in order to provide a secure and hassle free way to access the iPhone If you just touch the Home button of your iPhone 5s, the Touch ID sensor quickly reads your fingerprint and then it automatically unlocks the iPhone.This TouchID can even be used to authorize purchases from Apples iTunes Store, App Store, and iBooks Store.
What’s the Difference between TouchID and other Fingerprint Scanners ?
Have you noticed that in Fingerprint scanners in laptops and other devices, you have to swipe your finger. Whereas, Apple’s TouchID, powered by AuthenTec’s patented technology, simply requires the user to place their finger against the iPhone 5s home button. No swiping is required.
What’s inside TouchID ?
The TouchID sensor has a Laser Cut Sapphire Crystal in which the user keeps the finger for unlocking the iPhone , this sapphire crystal is surrounded by an Steel ring that acts as an electrode and drives a low-frequency RF signal into a user’s finger. The fingertip is attenuated by unique ridges and valleys, which are then captured by AC Capacitive single touch sensors embedded in the home button.
The Advanced Capacitive Touch single touch sensor can scan a finger at 500 pixels per inch , and uses a 3D ( 3 dimensional view ) method which identifies the fingerprint accurately .
Is TouchID Hacked?
Just a few days after TouchID Sensor debuted, it was hacked by a white hat hacker group based in Germany.
The Techniques that was used used to fool the TouchID is explained below:
(1) Obtain a suitable fingerprint that is un-smudged and which unlocks the iPhone.
(2) Lift the print by using “super glue ” and a suitable fingerprint powder and a fingerprint tape.
(3) After doing the above steps, use a High-end Laser printer to print the fingerprint and use a smear glue and glycerol on the ink side of the fingerprint and dry it so it becomes like a rubbery material which acts as an fake finger print to unlock the iPhone 5s.
This process is quite cumbersome and not as easy as using a password cracking tool to access devices with typically unsafe passwords. Additionally, smartphone users pay scare attention to password best practices and therefore whatever protection TouchID provides is anyway considered as only a bonus. Corporate are generally more aware of security requirements; but, Apple is not targeting corporate customers anyway.
Some recommendations
(1) Basically TouchID in the iPhone 5s is not a “strong” security control – it’s a “convenient” Security Control . Don’t fully depend on the TouchID , instead use Pin numbers and Passwords for the iPhone to prevent unauthorized access.
(2) Even though if you use Pin numbers and Passwords,, don’t use any dictionary passwords orany personally identifiable information as passwords.(3) Change the password or the pin once in a week or any reasonable time based on the risk of unauthorized access
(4) While using any Screen-Guard you are advised to use Matte finish Screen-Guard so that the password and pin numbers cannot be easily visible to the others who try to use the iPhone.
(5) Use an application locker which helps to lock your applications as well as your personal information, contacts, messages etc.
Is the iPhone 5s secure?
It can be if you use it securely.
Information Security, SSAE 16, ISO 27001, CISA, Cert-IN