Apple and Samsung have implemented “positive security...

Apple and Samsung have implemented “positive security measures” to secure fingerprint data collected from smartphones, but more work remains, said a Friday release from Sen. Al Franken, D-Minn. Franken asked both companies -- Apple last fall, Samsung in May -- for information about the security measures for Apple’s Touch ID and Samsung Galaxy S5’s fingerprint scanner (CD May 15 p15). “What I got was mostly good news,” Franken said of the responses from Apple (http://1.usa.gov/1u0uLq0) and Samsung (http://1.usa.gov/UfY9rR), both released Friday. “Both companies encrypt and isolate fingerprint data on their devices and have designed their systems so that fingerprint data cannot be removed from those devices, either in person or over the Internet.” Franken highlighted areas he believes need improvement. “Both companies have not taken any further steps to prevent criminals from bypassing fingerprint readers with a spoofed print,” he said. “That problem needs to be fixed, since fingerprint readers are becoming a gateway to a range of powerfully sensitive information.” Apple and Samsung had no immediate comment.