Apple (Hacker News, MacRumors):

Our solution hinges on splitting the Apple Reference Image process into two phases: creating a secure digital negative, and developing that negative into a reference image. Each phase receives our strongest protections.

[…]

Apple Reference Image provides both a lower bound and an upper bound on capture time from Apple’s cryptographic timestamp service, and we guarantee the photo was taken between the two bounds. On a regular heartbeat, the device requests a cryptographic timestamp token, and retains the most recent one it has received. Globally this happens on average every 15 minutes, though the interval depends on local network conditions. This provides a proven lower bound timestamp for the photographic capture. After capture, the device requests a second timestamp to use as an upper bound, and both timestamps are embedded and signed with the sensor data.

[…]

When the user chooses to create a reference image, the device uploads the digital negative to PCC, which runs the processing steps needed to render the image — including demosaicing, tone mapping, and compression — in a highly secure, private, and verifiable environment. Experts can verify that PCC doesn’t alter a digital negative during development: they can examine the software that does the work.

[…]

Finally, as no security system is perfect, we created a revocation system that can revoke individual photos, as well as all photos from a specific sensor.

[…]

We built Apple Reference Image to avoid using an explicit, public credential for photographers, and to avoid even implicit public association between different photos taken by the same sensor. The final reference image is instead signed by Apple’s signing service, after validation by PCC.

Previously:

• iPhone 18 Pro and iPhone 18 Pro Max

German chemical conglomerate BASF has filed a patent infringement lawsuit against Apple in a U.S. federal court, accusing the iPhone maker of using its technology in Face ID and related facial authentication systems without a license.

The complaint, lodged in the United States, claims Apple’s TrueDepth camera system, Secure Enclave processing, and liveness-detection features in iPhones, iPads, and other devices infringe multiple BASF-owned patents covering methods for secure biometric matching, three-dimensional facial mapping, and anti-spoofing analysis. BASF alleges these technologies have been incorporated into Apple products since the introduction of Face ID in 2017 and continue to be used for device unlocking, Apple Pay, and other authentication functions.

BASF, best known for chemicals, materials, and agricultural products, maintains a sizable intellectual-property portfolio that extends beyond its core industries. The company asserts the patents in question describe techniques for capturing and verifying facial geometry in a way that resists photographs, masks, or other presentation attacks — capabilities central to modern smartphone security.

Apple has not publicly commented on the specific filing. The company has faced a series of Face ID and Touch ID-related patent cases over the years from various rights holders and has generally defended its biometric systems as independently developed and implemented within its own secure hardware architecture.

The suit seeks an injunction against further sales of accused devices, monetary damages for past infringement, and other relief. Patent cases of this type often take years to resolve and frequently involve challenges to patent validity at the U.S. Patent and Trademark Office in parallel with district-court litigation.

The dispute highlights how companies outside the traditional consumer-electronics sector sometimes assert older or adjacent patents against high-volume products such as smartphones. Whether BASF’s claims will survive early motions or claim-construction proceedings remains to be seen. Apple routinely contests such assertions and has prevailed in several prior biometric-patent matters.

MacDailyNews Take: The case is yet another in the crowded field of Face ID-related litigation that has dogged Apple since the feature launched nearly a decade ago. Courts and the patent office will now determine whether BASF’s patents actually cover the specific combination of sensors, algorithms, and secure processing Apple deploys.

And, yes, we haven’t thought of BASF since:

Also, yes, we’re old.

‎
Please help support MacDailyNews — and enjoy subscriber-only articles, comments, chat, and more — by subscribing to our Substack: macdailynews.substack.com. Thank you!

Support MacDailyNews at no extra cost to you by using this link to shop at Amazon.

The post BASF sues Apple over alleged face authentication patent violations appeared first on MacDailyNews.