Affichage des articles dont le libellé est Nukib. Afficher tous les articles
Affichage des articles dont le libellé est Nukib. Afficher tous les articles

mardi 16 avril 2019

U.S. to press allies to keep Huawei out of 5G in Prague meeting

By Christopher Bing, Jack Stubbs


WASHINGTON/LONDON -- The United States will push its allies at a meeting in Prague next month to adopt shared security and policy measures that will make it more difficult for China’s Huawei to dominate 5G telecommunications networks, according to people familiar with the matter and documents seen by Reuters.
The event and broader U.S. campaign to limit the role of Chinese telecommunications firms in the build out of 5G networks comes as Western governments grapple with the national security implications of moving to 5G, which promises to be at least 100 times faster than the current 4G networks.
The issue is crucial because of 5G’s leading role in internet-connected products ranging from self-driving cars and smart cities to augmented reality and artificial intelligence. 
If the underlying technology for 5G connectivity is vulnerable then it could allow hackers to exploit such products to spy or disrupt them.
The United States has been meeting with allies in recent months to warn them Huawei’s equipment could be used by the Chinese state to spy. 
Officials from more than 30 countries will meet May 2-3 to agree on security principles for next-generation telecoms networks, said Robert Kahofer, chief of cabinet at Czech cybersecurity agency NUKIB.
A U.S. official familiar with the plan said the Prague meeting marks a strategic shift in how the U.S. government plans to urge allies to drop Huawei and other 5G vendors in the future, which pose a risk to national security. 
The official described the approach as “softer.”
A Huawei spokesman did not immediately respond to a request for comment. 
U.S. proposals for the Prague meeting urge governments and operators to consider the legal environment in a vendor’s country, how much state support a company receives, transparency of corporate structure, and trustworthiness of equipment. 
It also calls on partners to prioritize security and work together on investigations into cyberattacks aimed at 5G architecture.
The documents do not mention Huawei, the world’s largest telecoms equipment maker, by name, but U.S. officials said they hoped it would provide the “intellectual framework” needed for other countries to effectively bar Chinese vendors. 
In August, U.S. President Donald Trump signed a bill that barred the U.S. government itself from using Huawei and ZTE Corp equipment.
“The goal is to agree upon a set of shared principles that would ensure the security of next-generation telecommunications networks,” said one of the officials, who spoke on condition of anonymity to discuss private conversations.
The Prague conference has been organized by the Czech foreign ministry with support from NUKIB, said Kahofer. 
The foreign ministry did not respond to requests for comment.
Delegations from all of the European Union’s 28 member states, as well as the European Commission, NATO and around eight other countries including the United States and Australia are expected to attend, Kahofer said.
China and Russia have not been invited, he added, but stressed that the event was not “an anti-Huawei or anti-China conference.” 
Europe has emerged as a key battleground for the future of 5G, with the United States pushing allies and partners to bar Chinese vendors but European governments wary of the trade and economic consequences of angering Beijing.
A senior U.S. cybersecurity official said last week Washington wanted European governments to adopt “risk-based security frameworks”, citing recent moves in Germany to implement stricter security standards for all 5G vendors, and that doing so would effectively rule out using Huawei and ZTE.
“The United States welcomes engagement from partners and allies to discuss ways that we can work together ensuring that our 5G networks are reliable and secure,” said White House National Security Council spokesman Garrett Marquis
Officials in Britain, which last month exposed new security flaws in Huawei equipment but says it has found no evidence of Chinese state interference, have also spoken of “raising security across the board” for 5G. 
The European Commission said in March that EU nations would be required to share data on 5G cybersecurity risks and produce measures to tackle them by the end of the year.

mercredi 13 février 2019

Pariah Company

Huawei Was a Czech Favorite. Now? It’s a National Security Threat.
By Marc Santora and Hana de Goeij
A security directive could severely restrict the role Huawei plays in building the country’s 5G network.

PRAGUE — For more than 1,000 years, the sprawling castle complex perched high above Prague has been the seat of power for Holy Roman emperors, the kings of Bohemia and, now, the Czech president, Milos Zeman
And for the last four years, the Chinese technology giant Huawei has had a contract to fulfill the communication needs of the president and his staff.
The presidential contract is the most visible symbol of how deeply Huawei has established itself in the Czech Republic, long viewed by China as a springboard country for its interests across the European Union.
So when the Czech government’s cybersecurity agency issued a directive in December warning that Huawei represented a national security threat, company officials were shocked — as was Zeman, known for his closeness to China
Huawei has threatened legal and financial retaliation. 
Zeman has accused his own intelligence services, including the cybersecurity agency, known as Nukib, of “dirty tricks.”
The unexpected confrontation in the Czech Republic comes as Huawei, already entangled in the trade war between China and the United States, is running into deepening problems in European Union countries, where it has worked for years to build inroads. 
Only weeks after Nukib issued its directive against Huawei, Polish authorities in January arrested a Huawei employee in Warsaw on charges of spying.
Looming above everything is the question of which companies will build the infrastructure of the fifth generation of wireless technology, known as 5G. 
American officials regard the technology as a national security issue and have moved aggressively to limit the role of Chinese companies, especially Huawei.
Speaking in Budapest on Monday, Secretary of State Mike Pompeo, who is touring Central Europe, warned about “risks that Huawei’s presence in their networks present — actual risks to their people, to the loss of privacy protections.”
Milos Zeman right, met in Prague in 2016 with his Chinese protector Xi Jinping.

Huawei is already hitting problems in Germany and Britain, traditional American allies. 
Yet few people would have predicted that the most direct action against the company would come from the Czech Republic, where Zeman has long courted Chinese investment and is planning to make his fifth visit to China in the spring. 
The Nukib directive has infuriated the president and driven a wedge into the Czech government.
In an interview, Dusan Navratil, the head of the agency, said the stakes are high because 5G “will change the whole way societies function.” 
While the public might think of 5G as simply a matter of faster download times, the system is designed to be far more, linking everything from the cars we drive to the hospitals we visit in a way unimaginable only a decade ago.
Mr. Navratil said one reason his agency penalized Huawei was China’s National Intelligence Law, which was passed in 2017 and requires Chinese companies to support, provide assistance and cooperate in the authoritarian nation’s national intelligence work, wherever they operate. 
While declining to discuss classified intelligence, he offered an analogy.
“Imagine there is a restaurant where the hygiene is filthy rotten,” Mr. Navratil said. 
“The agency overseeing the restaurant has no evidence someone has gotten sick or died. But does that mean you should eat there?”
As a result of the agency’s move, Huawei’s business in the Czech Republic could be devastated. 
The directive doesn’t affect consumer products, such as mobile phones, but it aims to severely restrict the role Huawei can play in 5G, and to block it from supplying equipment to public and private entities deemed critical to national security.
“This is the first time we have ever issued such a warning,” Mr. Navratil said.
Since then, the Ministries of Health and Justice announced that they would not honor existing contracts to buy servers from Huawei. 
The country’s largest carmaker, Skoda, has temporarily stopped Huawei from bidding on projects as it undergoes a security review demanded by the new cyberdirective.
Even Huawei’s contract with the presidential offices is under review.
In turn, Huawei has been hitting back.
Last week, the company threatened litigation against the cyberagency, as well as economic retaliation. 
It also has intensified lobbying campaigns with some lawmakers and others in the political elite, including a Czech delegation that the company hosted in China last month.
“We cannot just rush headlong into this,” Dusan Navratil, the head of the Czech cybersecurity agency, said of the country’s relationship with Huawei.

“The Chinese believe they are one to two years ahead of everyone and they see this as an effort to slow them down,” said Jaroslav Roman, a Czech Communist Party official on the visit. 
“They wanted us to know that if the discrimination continued, there would be repercussions.”
The threat of economic retaliation has most alarmed many business leaders and lawmakers, given how ardently Zeman has built economic ties between the two countries. 
One example is PPF Group, the largest Czech company, which has focused on China in recent years.
Its home lending business counts some 15 million Chinese customers, which is not much in Chinese terms but hugely important for the Czech-owned company. 
PPF also controls the country’s largest telecom provider, O2, and had signed a memorandum of understanding with Huawei regarding future projects before the security agency issued its warning. That will now have to be reviewed.
Mel Carvill, a board member for Home Credit, a consumer loan company that is a part of the PPF Group, said the Chinese regulatory agency overseeing the home lending business had not taken any action against the company.
“Of course, if relations between countries deteriorate, things might become difficult,” he said.
Huawei officials, for their part, were so confident in their standing in the Czech Republic that in June, they decided to push for Czech security clearance to work on critical infrastructure — a move that may have contributed to the cyberagency’s decision to more closely scrutinize the Chinese company.
“It was overreach on their part,” said Jakub Janda, the director at the Prague-based think-tank, European Values.

Huawei’s offices in Warsaw. The company has threatened litigation against the cyberagency and economic retaliation against the country.

Mr. Janda said there was particular concern about the dozens of technology assistants working for Huawei who had unlimited access to all the data gathered by their mobile partners.
Unlike cases involving Russians accused of spying in the Czech Republic, Mr. Janda noted, concerns about Chinese espionage are kept quiet for diplomatic reasons. 
No one has been charged with spying in the country.
Even as Huawei is trying to regain footing in the Czech Republic, the company is also mounting a public relations counteroffensive in Poland, after the arrest in January of the company executive. 
Last week, Huawei issued a news release in Poland, warning that communication services would increase by 300 percent if the company were excluded from the market.
Meanwhile, Huawei has sought to ease Polish security concerns by promising to spend hundreds of millions on a new cybersecurity center. 
It has also offered the Polish government access to Huawei’s source code in order to prove that its equipment does not have a “back door” for the Chinese intelligence services.
However, experts have said such gestures are hollow, given how often codes can be updated or changed.
For Mr. Navratil, the head of the Czech cyberagency, the issue facing security officials was as evident as it was urgent.
“We are a sovereign country and we have a right to say what is in our security interest,” he said. 
It would be helpful, he said, if NATO or the E.U. would offer some specific guidance since it would give small nations greater ability to act without fear of retaliation.
That does not appear to be happening anytime soon.
“Given the stakes,” Mr. Navratil said, “we cannot just rush headlong into this.”