With 'Data Protections', Apple Provides Enhanced Security Against Threats In The Cloud

Anything that has access to the internet, is at risk of hack and all forms of cyberattacks. And Apple is trying to up its game.

The iPhone maker is known for its privacy approach, that has garnered quite a lot of headlines due to its controversy. Regardless, the company is not going to allow third-parties from snooping into its users' data.

This is why Apple is introducing what it calls "powerful new data protections" to enhance the security and privacy of its users while using some of its products.

Here, the feature is meant to secure iMessage Contact Key Verification, Security Keys for Apple ID, and Advanced Data Protection for iCloud.

The data protections feature us meant to "provide users with important new tools to protect their most sensitive data and communications."

Particularly, the three advanced security features focused on protecting against threats to user data in the cloud.

First up, is an enhanced protection to iMessage.

Here, Apple provides Contact Key Verification, where users can verify they are communicating only with whom they intend.

Conversations between users who have enabled

When iMessage Contact Key Verification is enabled, users will receive automatic alerts if an exceptionally advanced adversary, such as a state-sponsored attacker, were ever to succeed breaching cloud servers and inserting their own device to eavesdrop on these encrypted communications.

And to provide even higher security, iMessage Contact Key Verification also allows users to compare a Contact Verification Code in person, on FaceTime, or through another secure call.

Second, Apple introduces Security Keys for Apple ID, users have the choice to require a physical security key to sign in to their Apple ID account.

This feature allows users to make use of third-party hardware security keys to enhance their protection.

The security feature to protect Apple ID is designed for users who, often due to their public profile, face concerted threats to their online accounts, such as celebrities, journalists, and members of government.

For those users who opt in, the Security Keys feature will strengthens Apple’s two-factor authentication by requiring a hardware security key as one of the two factors.

This approach takes Apple's existing two-factor authentication even further, preventing advanced attackers from obtaining a user’s second factor in a phishing scam.

And third for last, Apple provides Advanced Data Protection for iCloud, in order to unleash end-to-end encryption to the cloud.

This security feature enhances Apple's existing file encryption system built into iPhone, iPad, and Mac.

"Apple makes the most secure mobile devices on the market. And now, we are building on that powerful foundation,” said Ivan Krstić, Apple’s head of Security Engineering and Architecture.

"Advanced Data Protection is Apple’s highest level of cloud data security, giving users the choice to protect the vast majority of their most sensitive iCloud data with end-to-end encryption so that it can only be decrypted on their trusted devices."

This feature essentially protects users from data breach involving unauthorized access to users' iCloud.

For users who opt in, this feature adds the total number of data categories protected using end-to-end encryption rises to 23, including iCloud Backup, Notes, and Photos. The only major iCloud data categories that are stilnot covered are iCloud Mail, Contacts, and Calendar because of the need to interoperate with the global email, contacts, and calendar systems.

In the announcement, Apple quoted Craig Federighi, Apple’s senior vice president of Software Engineering, as saying:

Apple does this all using the security system built directly into its custom chips, which already provide encryption and data protection.

The software upgrade simply enhances those three sectors.

According to Apple, these features join a suite of other protections that Apple makes, including the Lockdown Mode mode, which offers optional level of security for users such as journalists, human rights activists, and diplomats.