Newshot Apple details Secure Exclaves security architecture: Siri, camera and microphone privacy protection upgraded, even the main system cannot access raw information
IT之家 November 12 news, Apple today published a technical article detailing Secure Exclaves, the security architecture in its Apple Silicon chips, explaining how this mechanism prevents raw audio and video information collected by the camera and microphone from being accessed by the operating system, applications, or even Apple itself.
Apple's Security Engineering and Architecture team (SEAR) and Core OS team published an article titled "Secure Exclaves and Ambient Sensing" on the Apple Security Research blog on November 12, introducing the design principles, underlying architecture and practical application scenarios of Secure Exclaves.
Apple said that as devices gradually gain more intelligent ambient sensing capabilities, cameras and microphones need to continuously process information about the surrounding environment. For example, a device needs to identify whether the user is nearby, detect specific voice commands, and determine whether someone is currently using the device. Such features require processing sensitive audio and video data, but that does not mean the device must continuously record or store this information.
To this end, Apple introduced Secure Exclaves, which place the processing of camera and microphone data in an independent, isolated runtime environment. According to Apple, in ambient sensing mode, raw audio and video data is not passed to the main operating system, applications or Apple itself, and is discarded after processing. The system only exposes the necessary metadata externally, such as whether a specific sound was detected, whether a registered user was recognized, and information about the user's location.
Secure Exclaves is built around three main aspects: data isolation, controlled communication interfaces and security indication mechanisms.
- In terms of data isolation, Secure Exclaves runs in a processor execution environment separate from the main operating system and uses Apple's custom L4 microkernel. Apple also manages memory access permissions through a Secure Page Table Monitor (SPTM), ensuring that even the main operating system kernel cannot read data in memory dedicated to Secure Exclaves.
- In terms of communication, Apple developed a communication mechanism called Secure IPC, written in Swift, which restricts data exchange between different components through predefined interfaces. Each enclave can only access explicitly authorized resources, and only vetted, necessary information can be passed to the main operating system.
- In terms of security indication, Apple designed a dedicated Exclave Indicator Controller, responsible for managing when camera and microphone data may leave the isolated environment. When an application needs full access to sensor data, the system must first ensure that the corresponding indicator light or screen prompt is displayed and has reached the specified visible duration before data transmission is allowed.
Apple also introduced the application of Secure Exclaves on HomeView. The device can identify up to 6 registered users through the camera and microphone, while determining whether users are near the device. The camera enclave is responsible for detecting faces and generating related data, while the microphone enclave processes audio information, after which inference is performed through a separate Neural Engine enclave queue.
Ultimately, the system only passes metadata such as user identity, location and recognition confidence to the main operating system, and does not provide it with raw images or audio. The operating system can use this to adjust the content displayed in features such as Calendar, Messages and Apple Music.
IT之家 notes that Secure Exclaves is also applied to the camera and microphone screen indication features of the iPhone 18 Pro, iPhone 18 Pro Max and iPhone Duo, as well as the camera indication feature of the MacBook Neo and HomeView.
Using the "Hey Siri" voice wake-up feature on the iPhone 18 Pro as an example, Apple explained how this mechanism works. The device first listens for the wake word at low power through the Always-On Processor (AOP). When a possible "Hey Siri" command is detected, the audio buffer is handed to the audio enclave for processing, and the Siri enclave performs a second round of recognition.
Before the wake word is confirmed, the main operating system only receives a notification that Siri needs to be woken, and does not obtain audio data. Only when the user enters an active interaction state and the system has completed the display of the microphone indicator and security checks is audio transmission to the Siri service allowed.
Apple said the screen indication feature is not drawn solely by the operating system. For devices that use a screen indicator dot, a separate display enclave checks the pixels actually displayed on the screen, including color, shape, duration and brightness, to ensure the indicator is genuinely visible to the user and to prevent malware from misleading users by hiding or forging the indicator.
On the underlying technology side, Apple said the Secure Exclaves microkernel uses a capability mechanism to manage permissions. System components do not have permission to access other components or hardware resources by default, and can interact only after explicit authorization.
Apple also performed formal verification of the microkernel, using mathematical methods to check whether the C language implementation conforms to predefined functional specifications, in order to find underlying logic issues that traditional software testing struggles to cover. However, Apple also emphasized that the current formal verification is carried out incrementally and does not cover all parts of the entire microkernel.
- "Secure Exclaves and Ambient Sensing - Apple Security Research"
Advertising statement: External redirect links contained in this article (including but not limited to hyperlinks, QR codes, passwords and other forms) are used to convey more information and save selection time, and the results are for reference only. All articles on IT之家 that contain external links include this statement.
Related articles
- Gurman: Apple may launch an autonomous agentic Siri as early as next year, proactively completing tasks for users
- The camera app in the first developer preview of iPadOS 27.3 adds a Siri entry: visual intelligence within reach
- Report says Apple plans to pay publishers up to hundreds of millions of dollars to obtain news content to improve the AI version of Siri
- Another year passes: Cook says Apple's new Siri with Apple Intelligence "expected to launch next year"
- Apple's Siri suspected of collecting user recordings without consent, faces investigation by French prosecutors
- After setbacks with personalized Siri features, report says Apple adjusts strategy and will no longer preview new features in advance