Apple Platform Security
- Welcome
- Intro to Apple platform security
- Hardware security and biometrics
-
System security
- System security overview
-
Secure boot
- Boot process for iPad and iPhone devices
- Memory safe iBoot implementation
- Mac computers with Apple silicon
- Intel-based Mac computers
- Signed system volume security
- Secure software updates
- Background Security Improvements
- Operating system integrity
- Device pairing and connection security
- BlastDoor for Messages and IDS
- Lockdown Mode security
- Overview of additional macOS system security capabilities
- System security for watchOS
- Random number generation
- Communicating emergency information using satellites
- Apple Security Research Device
-
Encryption and Data Protection
- Encryption and Data Protection overview
- Quantum-secure cryptography with Apple devices
- Passcodes and passwords
- Data Protection
- FileVault
- How Apple protects users personal data
- Digital signing and encryption
-
App security
- App security overview
- App code signing process
- App security in iOS, iPadOS, and visionOS
- App security in macOS
- Supporting extensions
- Secure features in the Notes app
- Secure features in the Shortcuts app
-
Services security
- Services security overview
- Apple Accounts and Managed Apple Accounts
- iCloud
- Passcode and password management
-
Apple Pay
- Apple Pay security overview
- Apple Pay component security
- How Apple Pay keeps users purchases protected
- Credit, debit, and prepaid cards
- Payment authorization with Apple Pay
- Paying with cards using Apple Pay
- Contactless passes in Apple Pay
- Rendering cards unusable with Apple Pay
- Apple Card security
- Apple Cash security
- Tap to Pay on iPhone
- Using Apple Wallet
- iMessage
- Secure Apple Messages for Business
- FaceTime security
- SharePlay security
- Nearby sharing security
- Find My
- Continuity
- Network security
- Developer kit security
-
Secure device management
- Secure device management overview
- Device management
- Apple Configurator security
- Screen Time security
- Glossary
- Document revision history
- Copyright and trademarks
[]SiriKit security for iOS, iPadOS, and watchOS
Siri uses the app extension system to communicate with third-party apps. On a device, Siri can access the users contact information and the devices current location. But before it provides protected data to an app, Siri checks the apps user-controlled access permissions. According to those permissions, Siri passes only the relevant fragment of the original user utterance to the app extension. For example, if an app doesnt have access to contact information, Siri wont resolve a relationship in a user request such as Pay my mother 10 dollars using Payment App. In this case, the app would see only the literal term my mother.
However, if the user has granted the app access to contact information, the app would receive resolved information about the users mother. If a relationship is referenced in the body portion of a messagefor example, Tell my mother on MessageApp that my brother is awesomeSiri doesnt resolve my brother regardless of the apps permissions.
SiriKit-enabled apps can send app-specific or user-specific vocabulary to Siri, such as the names of the users contacts. This information allows Siris speech recognition and natural language understanding to recognize vocabulary for that app and is associated with a random identifier. The custom information remains available as long as the identifier is in use, or until the user turns off the apps Siri integration in Settings, or until the SiriKit-enabled app is uninstalled.
For an utterance like Get me a ride to my moms home using RideShareApp, the request requires location data from the users contacts. For that request only, Siri provides the required information to the apps extension, regardless of the user permission settings for location or contact information for the app.
Published Date: February 18, 2021