Chinese communications giant Huawei and tech firm ZTE have been banned from participating in the rollout of Australia’s 5G mobile network.
In a statement issued this morning by Acting Minister for Home Affairs Scott Morrison and Minister for Communications and the Arts Senator Mitch Fifield, the government has controversially ruled out Huawei to be part of the 5G network all three mobile carriers are planning to roll out from next year.
Fifth generation (5G) is the next evolution of mobile technology. It is a high-performance network with very low latency and offering faster data speeds and enhanced capacity. Low latency makes it very useful for emerging technologies such as autonomous cars. 5G promises the ability to improve the daily lives of Australians, strengthen our connectivity and accelerate our networks.
“A long history of cyber incidents shows cyber actors target Australia and Australians. Government has found no combination of technical security controls that sufficiently mitigate the risks,” the ministers said.
“The government considers that the involvement of vendors who are likely to be subject to extrajudicial directions from a foreign government that conflict with Australian law, may risk failure by the carrier to adequately protect a 5G network from unauthorised access or interference.”
“This applies equally to all carriers, consistent with government’s long-standing commitment to a level playing field in the sector.”
The statement did not name Huawei or ZTE. But Huawei said they had been told Huawei and ZTE have been banned from supplying 5G technology to the three mobile carriers.
“We have been informed by the government that Huawei and ZTE have been banned from providing 5G technology to Australia,” Huawei Australia said on Twitter.
“This is a extremely disappointing result for consumers. Huawei is a world leader in 5G [that] has safely and securely delivered wireless technology in Australia for close to 15 years.”
Huawei is the biggest telco supplier in the world and the ban is expected to have major implications for Australia’s governmental and business relations with China.
Huawei is already a major supplier of communications infrastructure in Australia, recently winning a major contract to supply 4G technology for the Perth train system.
The ministers said the government has undertaken an extensive review of the national security risks to 5G networks:
“5G requires a change in the way the network operates compared to previous mobile generations. These changes will increase the potential for threats to our telecommunications networks, and these threats will increase over time as more services come online.”
Acting Minister for Home Affairs Scott Morrison said the government wants to realise the benefits of 5G, but acknowledges that this new technology introduces additional risks.
“The security of 5G networks will have fundamental implications for all Australians, as well as the security of critical infrastructure, over the next decade,” Morrison said.
Fifield said that it is vital that security and integrity underpinned the opportunities opened up by 5G networks.
“The government is committed to the timely rollout of 5G networks in Australia. 5G will drive substantial economic and social benefits across the economy, through new technologies which will be used in autonomous vehicles, smart cities, and advanced
agriculture,” Fifield said.
The government is committed to protecting this vital technology. To fully realise 5G’s benefits, government and industry need to continue to work together to take necessary steps to safeguard the security of Australians’ information and communications at all times, and the integrity and availability of the networks themselves.
Last year, the government introduced the telecommunications sector security reforms to provide a framework for Australia’s security agencies and industry to share sensitive information on threats to telecommunications networks.
The reforms introduce four new measures:
- A security obligation, which requires carriers and carriage service providers to protect their networks and facilities against threats to national security from unauthorised access or interference
- A notification requirement, which requires carriers and nominated carriage service providers to tell government of any proposed changes to their telecommunications systems or services that are likely to have a material adverse effect on their capacity to comply with their security obligation
- The ability for government to obtain more detailed information from carriers and carriage service providers in certain circumstances to support the work of the Critical Infrastructure Centre, and
- The ability to intervene and issue directions in cases where there are significant national security concerns that cannot be addressed through other means.
“The government’s telecommunications sector security reforms, which commence on September 18, place obligations on telecommunications companies to protect Australian networks from unauthorised interference or access that might prejudice our national security,” Morrison said.
‘Core’ and ‘edge’ in new 5G network
The ministers said 5G requires a network architecture that is significantly different to previous mobile generations. Traditionally, network equipment used by telecommunications operators has been categorised into the ‘core’ network and the ‘edge’ network.
“The core network is where the more sensitive functions occur including access control, authentication, voice and data routing, and billing.”
The edge consists of the radios and other equipment used to connect customer equipment (such as handsets, laptops and tablets) to the core network.
Where previous mobile networks featured clear functional divisions between the core and the edge, 5G is designed so that sensitive functions currently performed in the physically and logically separated core will gradually move closer to the edge of the network.
In that way, the distinction between the core and the edge will disappear over time. This shift introduces new challenges for carriers trying to maintain their customers’ security, as sensitive functions move outside of the highly protected core environment.
This new architecture provides a way to circumvent traditional security controls by exploiting equipment in the edge of the network — exploitation which may affect overall network integrity and availability, as well as the confidentiality of customer data.
While we are protected as far as possible by current security controls, the new network, with its increased complexity, would render these current protections ineffective in 5G.
Therefore, government has expectations of the application of the telecommunications sector security reforms obligations with respect to the involvement of third party vendors in 5G networks, including evolution of networks leading to mature 5G networks.
Morrison said it was the involvement of telco vendors who are likely to be subject to directions from “extrajudicial directions” from a foreign government that would be in conflict with Australian law. He said this may risk failure by the carrier to adequately protect a 5G network from unauthorised access or interference.
Morrison said carriers may still need to apply controls regardless of the vendor they choose. These controls would not displace existing cyber security practices or business risk mitigations. Government is well positioned to address these risks in partnership with industry.
The government has been working closely with telecommunications operators to ensure that they understand their new obligations and are ready to comply when the legislation commences on September 18, 2018.
“The government has now provided carriers with clear guidance about how their new legal obligations apply to 5G networks.”
As 5G and related technologies continue to develop, new risks relating to the technology may emerge and require further government consideration.
“The government will continue to engage and support Australians, including the telecommunications industry, to manage national security risks,” Morrison said.
“The government’s first priority will always be the safety and security of Australians.”