Huawei under fire as politicians fret over 5G security
Even Chinese company’s deep relationship with UK facing severe threat
For nearly 15 years, the Chinese group Huawei has seen the UK as a key market and a springboard to the other deals that helped it become the world’s largest telecoms equipment maker.
Huawei’s partnerships with the likes of BT and Vodafone have weathered bouts of unease over its rumoured links to the Chinese government and the People’s Liberation Army, which the company denies.
But as politicians from the UK and other countries start to consider the rollout of their 5G communications network, Huawei is suddenly facing a grave threat to its international business.
In recent weeks, US officials have toured Europe to warn against using Huawei equipment, while Australia and New Zealand have both joined the US in banning the Chinese company’s gear.
In the UK, Huawei has already signed a contract with the mobile phone operator Three to provide 5G equipment and is conducting tests with Vodafone and EE.
But the technological step change offered by 5G, which will become fundamental to every industry and sector becomes connected, has made the UK, and other governments, nervous of trusting the Chinese company.
“5G is key to enabling the internet of things which will in itself provide a greater range of opportunities for attackers,” said Ewan Lawson from the Royal United Services Institute, a UK defence think-tank.
“If you have security concerns about the backbone of the internet of things then that seems to be a significant change in the risk measurement for policymakers.”
Ian Levy, the technical director of the UK’s National Cyber Security Centre, said there were two main areas of concern: the risk of Chinese spying and the overall security of the network.
“The thing we care about the most is availability of the networks, so turning them off,” he said. “Can someone in Beijing press a button and turn off every piece of Huawei kit and what does that mean for the UK networks, that’s the number one concern.”
The speed of 5G and its latency — the time it takes digital commands to be executed — means that more data processing will take place at the edge of networks, near the devices making the commands, rather than being routed through centralised servers.
Until now the UK approach has been to surround or “island” Huawei kit with products and equipment provided by rival manufacturers such as Eriksson or Nokia. But Mr Levy says this is harder with 5G because more data are being processed away from central or core hubs.
“If you’ve got a bit of Huawei kit we want to make sure the stuff around it is not Huawei,” he said. “But 5G does make that harder, so it’s probably likely you will end up with less Huawei just because of the collusion risk between the different bits.”
The Chinese company, which employs 180,000 people worldwide and took $92.5bn in revenue last year, said that it prioritises security. “[For] every technology for us at Huawei we always try to put the security and safety as top priorities so all the design, products and services will be safe,” said Cui Haifeng, managing director of Huawei Enterprise Business in Germany.
But suspicions of Chinese companies in the west have grown since the adoption last year of a National Intelligence Law which says that “organisations and citizens shall . . . support, co-operate with and collaborate in national intelligence work”.
“The danger is that because of Chinese law, Huawei is required to provide support, help and information to the Ministry of State Security — a mix of the FBI and CIA,” said the Former National Security Agency’s deputy director Rick Ledgett. “The legal process and the protection is just not there.”
Huawei has also been swept up in a general backlash in the west toward China’s “Made in China 2025” industrial policy, which identifies key industries in which Beijing will seek to foster dominance by domestic companies over overseas rivals. The policy has weakened support for China in the western business community, previously was its biggest supporter.
Against this backdrop of increased hawkishness toward China, the fear is that Huawei, which has deep roots in foreign communications networks, could be called on to gather data and spy on adversaries.
Mr Ledgett said 5G was a “game changer” for security: “If you are looking at how to attack a network then complexity is your friend”. Despite playing down the impact of US pressure, the mood from the UK authorities towards Huawei has notably shifted in the past few weeks.
A meeting earlier this month of the oversight board which monitors the testing carried out on Huawei equipment at a special laboratory in Banbury was described by officials and executives with knowledge of the talks as “strained”.
Last week, the NCSC, which leads the oversight board, took the unusual step of issuing a public reminder to Huawei that it must tackle technical issues raised in its last report published in July.
That report identified shortcomings in Huawei’s engineering processes which exposed “new risks in the UK’s telecommunications networks” — the first time Britain has flagged any worries over the Chinese company in the four years since an evaluation centre in Banbury, Oxfordshire was established.
For now, officials said the worry is guaranteeing the kit cannot be attacked by hostile cyber hackers — who may come from any country and not necessarily China. The evaluation centre which tests all Huawei kit before clearing it for use by telecoms operators has not found a smoking gun which points to direct Chinese espionage or malicious activity.
But the bugs and defects have raised serious doubts about the equipment — even though telecoms operators say it is the cheapest and best on the market.
“Back doors would be too strong a word but there was stuff in the hardware that looked like a potential vulnerability which could be exploited,” said one former UK intelligence official.
One possible approach to Huawei being considered by UK officials is to take a similar line on Huawei to the one adopted on the Russian cyber security firm Kaspersky Labs. Last December the chief executive of the NCSC, Ciaran Martin, wrote to all government departments warning them not to use Russian anti virus software after fears data could be transferred to the Russian state.
While that approach stopped short of issuing a ban on Kaspersky, the message to the business community and industries responsible for critical infrastructure was clear.
Whatever the UK decides, some in the telecoms industry believe the backlash against Huawei has been fuelled by the company’s rapid rise. “One of the reasons Huawei is being looked at more closely by governments and intelligence agencies is because they have been so successful,” said one telecoms executive. “They are a much larger part of the supply chain than they were five years ago.”