Thursday, January 15, 2015 10:40:37 AM
A new patent filing describes using the cloud to transfer your Touch ID fingerprint data to other devices. Would such a system be safe and secure?
by Lance Whitney
@lancewhit
/January 15, 2015 6:04 AM PST
Apple has envisioned a technology that would sync your Touch ID data with other mobile devices, as well as point-of-sale systems, via iCloud.
Published on Thursday by the US Patent and Trademark Office, a patent filing called "Finger biometric sensor data synchronization via a cloud computing device and related methods" illustrates a way to record your fingerprints on one device via Apple's Touch ID sensor and then upload them to the cloud to sync them with other devices.
Introduced in 2013, the Touch ID sensor is available on the iPhone 5S and the latest iPhones and iPads. The sensor requires your fingerprint to access the device and to make purchases using the Apple Pay payments system. Setting up Touch ID is a matter of registering one or more fingerprints on your device.
Why would Apple propose a cloud-based system for this process? In its patent filing, the company suggests that Touch ID enrollment may be "cumbersome for users in some instances, such as when multiple fingerprints, users and/or devices are used."
For example, my wife and I had to register our fingerprints not only on our own iPhones and iPads, but on each other's iPhones and iPads. That process was cumbersome. Cloud-based syncronization would eliminate the need to register all your fingerprints on every device you use.
But here's the problem: With the current technology, your fingerprints are stored solely on your iOS device. As Apple explains on its Touch ID security page, "iOS and other apps never access your fingerprint data, it's never stored on Apple servers, and it's never backed up to iCloud or anywhere else."
So, how would this proposed syncing technology safeguard your Touch ID data?
As described in the filing, you would have to validate your Apple ID account before registering your fingerprints, just as you do by entering your pass code. Your fingerprint data would then be encrypted and sent to iCloud. To use your fingerprints on a second device, you would have to verify them from a "to be matched" set of fingerprints on that second device. Your fingerprints on both devices would have to match up with the ones stored on iCloud.
Taking it a step further, the second device envisioned in this scenario could be an NFC-enabled point-of-sale system, one that you would use to buy items via Apple Pay. The POS would have its fingerprint sensor that you would tap to validate the "to be matched" set of fingerprints.
Further, the technology could use NFC or bluetooth to sync your fingerprint data as a more secure alternative to iCloud. However, hat would be practical only for syncing two devices in close proximity to each other.
Such a system would certainly ease the process of setting up multiple fingerprints on multiple devices. But one of the security benefits of the current Touch ID is that Apple does not store your fingerprints online. Apple would have to prove that the system would be secure before users would consider storing their encrypted fingerprints in the cloud
http://www.cnet.com/news/apple-eyes-way-to-sync-your-touch-id-data-in-the-cloud/#ftag=CAD590a51e
"Intellectuals solve problems; geniuses prevent them." - Albert Einstein
Recent BKYI News
- BIO-key International, Inc. Receives Notice of Non-Compliance from Nasdaq • GlobeNewswire Inc. • 04/22/2024 08:30:00 PM
- Switzerland’s Canton of Ticino Implements BIO-key’s Multi-Factor Authentication Solution in its Information Systems Center • GlobeNewswire Inc. • 04/09/2024 01:15:00 PM
- Identity and Access Management Software Provider BIO-key Preliminary 2023 Results: Operating Loss Trimmed Approx. $3.5M on Approx. 29% Revenue Growth to $9.1M; Investor Call Tomorrow at 10am ET • GlobeNewswire Inc. • 04/01/2024 08:45:00 PM
- Identity and Access Management/Cybersecurity Solutions Provider BIO-key International Hosts Q4 Investor Call Tues., Apr. 2nd at 10am ET • GlobeNewswire Inc. • 03/27/2024 01:30:00 PM
- Humanity International Investments Hits Major Milestones in Digital Identity with the Humanity Protocol Initiative in Partnership with BIO-key International • GlobeNewswire Inc. • 03/12/2024 06:17:46 PM
- BIO-key Receives $1.5M Pre-Paid, Two-Year Software Subscription Order for its Biometric Identification Platform • GlobeNewswire Inc. • 02/20/2024 01:59:00 PM
- Form 424B3 - Prospectus [Rule 424(b)(3)] • Edgar (US Regulatory) • 02/16/2024 10:02:13 PM
- Form SC 13G - Statement of acquisition of beneficial ownership by individuals • Edgar (US Regulatory) • 02/14/2024 08:30:35 PM
- Form SC 13G/A - Statement of acquisition of beneficial ownership by individuals: [Amend] • Edgar (US Regulatory) • 02/14/2024 01:04:15 AM
- Form EFFECT - Notice of Effectiveness • Edgar (US Regulatory) • 02/13/2024 05:15:36 AM
- Bridgetown, Barbados Credit Union Selects BIO-key’s PortalGuard to Enhance Access to Shared Workstations Including Biometrics • GlobeNewswire Inc. • 02/06/2024 01:59:00 PM
- Form S-1 - General form for registration of securities under the Securities Act of 1933 • Edgar (US Regulatory) • 01/30/2024 10:31:29 PM
- Form SC 13G/A - Statement of acquisition of beneficial ownership by individuals: [Amend] • Edgar (US Regulatory) • 01/25/2024 09:01:47 PM
- Tragsa Group Enhances Cybersecurity with BIO-key’s Multi-Factor Authentication Solution • GlobeNewswire Inc. • 01/22/2024 10:15:00 AM
- Haver & Boecker Implements Single Sign-On (SSO) with Multifactor Authentication via P&W Netzwerk and BIO-key Europe to Secure and Streamline User Access • GlobeNewswire Inc. • 01/17/2024 09:59:00 AM
- NJ-based Authentication Solutions Provider BIO-key to Review Growth Strategy and Progress at The Microcap Conf. in Atlantic City – Presentation Wed., Jan 31 at 10:50am ET • GlobeNewswire Inc. • 01/16/2024 01:59:00 PM
- Form 8-K - Current report • Edgar (US Regulatory) • 01/11/2024 04:54:32 PM
- Fargo, ND and Junction City, KS Choose BIO-key PortalGuard For Secure Access via Biometric Authentication • GlobeNewswire Inc. • 01/11/2024 12:58:00 PM
- BIO-key PortalGuard Wins 2024 Business Intelligence Group’s BIG Innovation Award for its Authentication Software • GlobeNewswire Inc. • 01/10/2024 02:01:00 PM
- Denmark’s Ministry of Foreign Affairs Bolsters Network Security via IT2Trust and BIO-key® • GlobeNewswire Inc. • 01/08/2024 10:00:00 AM
- Form 4 - Statement of changes in beneficial ownership of securities • Edgar (US Regulatory) • 01/03/2024 10:28:13 PM
- Form 4 - Statement of changes in beneficial ownership of securities • Edgar (US Regulatory) • 01/03/2024 10:20:08 PM
- Form 4 - Statement of changes in beneficial ownership of securities • Edgar (US Regulatory) • 01/03/2024 10:14:48 PM
- Portugal’s Judiciary Police Enhances Security Infrastructure via Securnet and BIO-key • GlobeNewswire Inc. • 01/02/2024 10:01:00 AM
NanoViricides Reports that the Phase I NV-387 Clinical Trial is Completed Successfully and Data Lock is Expected Soon • NNVC • May 2, 2024 10:07 AM
ILUS Files Form 10-K and Provides Shareholder Update • ILUS • May 2, 2024 8:52 AM
Avant Technologies Names New CEO Following Acquisition of Healthcare Technology and Data Integration Firm • AVAI • May 2, 2024 8:00 AM
Bantec Engaged in a Letter of Intent to Acquire a Small New Jersey Based Manufacturing Company • BANT • May 1, 2024 10:00 AM
Cannabix Technologies to Deliver Breath Logix Alcohol Screening Device to Australia • BLO • Apr 30, 2024 8:53 AM
Hydromer, Inc. Reports Preliminary Unaudited Financial Results for First Quarter 2024 • HYDI • Apr 29, 2024 9:10 AM