With the launch of the iPhone 5S, Apple has the tools to make the smartphone an enterprise-class device. But the big question is how far the company will go in realizing the device's full potential.
The latest iPhone upgrade, introduced Tuesday, is the first smartphone with a "desktop-class" 64-bit computing architecture, made possible through Apple's new A7 processor. This opens up the possibility of building business software that goes beyond the front-end applications developed today for the iPhone.
In addition, Apple built into the device a fingerprint scanner, called Touch ID, that in combination with the underlying architecture could enable enterprise software to use the biometric sensor for authentication, experts agree.
While the iPhone 5S holds promise, a lot has to happen before it is realized. For one, Apple would have to provide the necessary application programming interfaces to use the fingerprint scanner for signing into an email server or virtual private network. In addition, the company would have to release the hooks for leveraging the iPhone's new computing power.
If Apple did all that, then the benefits to business would be significant. "This could really put Apple in a leading position back into the enterprise," said Daniel Ford, chief security officer for Fixmo, which provides mobile technology for protecting corporate data.
Whether that is Apple's plan remains to be seen. The company did not emphasize the enterprise potential in unveiling the iPhone at its Cupertino, Calif., headquarters.
Instead, Phil Schiller, Apple's chief marketing officer, made a big deal over the phone's graphic capabilities for running games on the new architecture, hardly a priority for business. With the fingerprint sensor built into the home button, the focus was on authentication for signing into iTunes and unlocking the device.
"They're not as focused on the [enterprise] as they should be," said IDC analyst William Stofega of the scanner introduction. "Maybe the goal is to get it out there, making sure it works, and then really start peddling its capabilities as an extra layer of security for enterprise customers."
By introducing biometrics in a mainstream device, Apple is presenting businesses with a real-world example of how well the technology would work either as a complement for passwords. The effectiveness of passwords has diminished over the last few years due to increasingly better hacking techniques used by cybercriminals.
"In the past, if you talked about biometrics to a CSO, it would be a pretty abstract concept," said Paco Hope, a software security expert and principal consultant for Cigital.
The reliability and performance of Apple's fingerprint scanner, built on technology obtained in 2012 through the acquisition of AuthenTec, won't be known without independent testing. Because such technology has not been easy to use, fingerprint sensors have failed to attract much interest among businesses or consumers.
For example, Motorola Mobility, a unit of Google, included a fingerprint scanner in the Atrix 4G phone in 2011. The feature was later discontinued in part because of customer complaints that several attempts were needed for it to work.
For Apple's sensor to be enterprise-ready, it will have to read a minimum of 14 points on a fingerprint, Ford said. Anything less would not meet the requirements used when fingerprints are submitted as evidence to identify suspects in criminal cases.
"Anything less than 14 points on a fingerprint in my opinion is a failed implementation, because it's very easy for someone to duplicate," Ford said.
Read more about wireless/mobile security in CSOonline's Wireless/Mobile Security section.