Sharechat Logo

Bad news for Huawei as UK watchdog finds new security issues

Friday 29th March 2019

Text too small?

Chinese telecommunications network equipment provider Huawei has suffered another setback in its ambition to supply kit for New Zealand's fifth generation, or 5G, internet services, following new criticisms from the oversight board of the UK-based Huawei Cyber Security Evaluation Centre.

"Further significant technical issues have been identified in Huawei's engineering processes, leading to new risks in the UK telecommunications networks," the review board says in its annual report. The board is chaired by the chief executive of the UK government's National Cyber Security Centre, Ciaran Martin.

The report highlights a variety of technical and development process issues, although none of the problems is explicitly tied to the activities of Chinese government intelligence agencies.

The finding comes ahead of Prime Minister Jacinda Ardern's first state visit to China on Monday next week, where she will meet the Chinese president, Xi Jinping, and premier Li Keqiang.

The issue of the New Zealand government's draft refusal to allow Huawei equipment into the New Zealand 5G network is likely to arise as Huawei has become a bellwether issue in US-China trade and intellectual property tensions.

It is also a crucial issue for local providers Spark New Zealand and TwoDegrees Mobile, both of which use Huawei equipment in the current, 4G mobile network.

In a press briefing yesterday ahead of her lightning trip to Beijing, shortened to a single day because of the domestic demands of the Christchurch mosque attacks, Ardern said she had had no "recent updates" on the Spark application. It was declined on an initial basis by New Zealand's NCSC equivalent, the Government Communications Security Bureau, citing national security concerns.

Spark had yet to respond to the GCSB's initial findings and "it's a process that's independent of me and ministers at this stage," said Ardern, who acknowledged discussion of New Zealand's telecommunications regulation regime would come up in talks in Beijing.

"I do know this is an important issue for China, but our legislation is deliberately neutral and does not discriminate against country or company."

The issue is diplomatically sensitive because New Zealand joined other countries late last year in calling out the Chinese government for mounting co-ordinated cyber-attacks in 2017. There are also trade and geo-political tensions between the US, New Zealand's long-standing defence ally and partner in the Anglo-world global signals intelligence network known as the Five Eyes, and China, which is New Zealand's largest trading partner.

A Spark spokesman said the company was studying the HCSEC report before considering comment. There had been early hopes that the UK's watchdog approach could offer a route to New Zealand accepting Huawei equipment for the 5G roll-out over the next few years, despite the likelihood of ongoing pressure from the US not to deploy it.

Spark has been an enthusiastic user of keenly priced, actively supported Huawei gear in the 4G network and is concerned, in part, that a ban on Huawei in the 5G network will make options from alternative suppliers less competitively priced. 2Degrees also extensively uses Huawei equipment in its 4G network.

Both companies have been arguing that as long as Huawei technology is kept out of the 'core' of the 5G network, any security issues can be dealt with. But government agencies are concerned that the decentralised nature of 5G networks raises security concerns that differ from those dealt with in the 4G network.

The HCSEC annual report says "further significant technical issues" it found had led to "new risks in the UK telecommunications networks."

"No material progress has been made by Huawei in the remediation of the issues reported last year, making it inappropriate to change the level of assurance from last year or to make any comment on potential future levels of assurance".

The 2018 review had "continued to identify concerning issues in Huawei's approach to software development" and said it would be difficult to "appropriately risk-manage future products ... until the underlying defects in Huawei's software engineering and cyber-security processes are remediated.

"The Oversight Board can only provide limited assurance that all risks to UK national security from Huawei's involvement in the UK's critical networks can be sufficiently mitigated long term."

(BusinessDesk)

  General Finance Advertising    

Comments from our readers

No comments yet

Add your comment:
Your name:
Your email:
Not displayed to the public
Comment:
Comments to Sharechat go through an approval process. Comments which are defamatory, abusive or in some way deemed inappropriate will not be approved. It is allowable to use some form of non-de-plume for your name, however we recommend real email addresses are used. Comments from free email addresses such as Gmail, Yahoo, Hotmail, etc may not be approved.

Related News:

MARKET CLOSE: NZ shares rise; trading quiet ahead of upcoming earnings
NZ dollar firms against the Aussie heading into federal election
Fletcher-commissioned Deloitte report shows building material costs are low
RBNZ censures ANZ, prescribes risk capital calculation
RBNZ censures ANZ, prescribes risk capital calculation
SeaDragon shareholders back $4M injection to stave off liquidation
SeaDragon shareholders back $4M injection to stave off liquidation
Businesses get some reprieve in March quarter on cheaper prices
NZ manufacturing activity expands on month in April but down on year
Xero's CEO says it still has a cautious future in the US

IRG See IRG research reports