U.K. Allows Huawei to Build Non Critical Parts of its 5G Network

Huawei is given permission to build noncritical parts of the network, despite U.S. security concerns:

As widely expected, the UK government today decided to allow Huawei’s network equipment to play a limited role in its national 5G networks. After a security review, the UK’s National Security Council (NSC) made the decision today following a meeting chaired by Prime Minister Boris Johnson.

British officials from senior government departments held a meeting last Wednesday and made the recommendation to allow the world’s #1 network equipment vendor to play a “limited role” in national 5G networks. Today, that recommendation was made final.

Huawei is the leading 5G global network equipment vendor, with relatively few alternative providers — such as the European firms Ericsson and Nokia — none of whom are considered to offer a like-for-like option at this stage.

UK Digital Secretary Baroness Morgan said:

“We want world-class connectivity as soon as possible but this must not be at the expense of our national security. High-risk vendors never have been and never will be in our most sensitive networks.

“The government has reviewed the supply chain for telecoms networks and concluded today it is necessary to have tight restrictions on the presence of high-risk vendors.”

Huawei has been under scrutiny over alleged ties to the Chinese government, an allegation the company has repeatedly denied. The U.S. has urged the UK to ban equipment from the Chinese vendor over national security concerns and American officials issued their British counterparts with a dossier highlighting perceived risks earlier this month.

The UK has always maintained that any decision on Huawei would be evidence-led and based on its own reviews, but the result will nonetheless anger the U.S. which has been pushing for Huawei to be totally banned from 5G networks of allies.

Huawei, and other “high-risk” vendors, will face the following restrictions:

  • Excluded from all safety-related and safety-critical networks in critical national infrastructure.
  • Excluded from security-critical ‘core’ functions, the sensitive part of the network.
  • Excluded from sensitive geographic locations, such as nuclear sites and military bases.
  • Limited to a minority presence of no more than 35 percent in the periphery of the network, known as the access network, which connects devices and equipment to mobile phone masts.

Governing that Huawei has no more than 35 percent presence in the periphery of the overall 5G network is particularly interesting. This restriction ensures that if Huawei’s equipment was later compromised, or deemed too risky, around two-thirds of the UK’s 5G network would remain unaffected.

The UK is  upgrading its wireless network technology for the rollout of 5G.                                           PHOTO: DANNY LAWSON/ZUMA PRESS ………………………………………………………………………………………………………

John Strand of Strand Consult wrote today in a note to subscribers:

  1. The decision relates to the use of Huawei equipment in the United Kingdom. In practice, this means that the May 2018 total ban on ZTE equipment by the UK’s National Cyber Security Centre will continue.
  2. Huawei are now classified as a high risk vendor following the conclusions of the Telecoms Supply Chain Review.
  3. The use of Huawei equipment will be prohibited in core networks. This means that the backbone of UK mobile networks must not contain Huawei equipment. This policy demonstrates that UK authorities recognize the risk of equipment made by entities affiliated with the Chinese government. If Chinese-made equipment was safe, Huawei equipment would not be prohibited from the network core.
  4. The use of Huawei in the radio access network (RAN) will be limited to 35 percent of the active equipment. This limits the amount that Huawei can sell in the UK. It also means that UK operators will have to prioritize network upgrades in the Western part of the country where Huawei equipment is largely deployed.  In practical terms, it will not be possible for an operator to use Huawei for more than 35 percent of the equipment and then use another Chinese or Huawei-white labeled product for the rest of the network, or a portion thereof. The goal of the policy is to limit equipment from Chinese owned and/or affiliated entities, even if it is not explicitly written.
  5. The use of Huawei equipment will be expressly prohibited in sensitive geographical areas in the UK, areas selected for national security reasons. Indeed, this is already practiced in France where Huawei equipment in restricted in Toulouse, home of Airbus and the European aerospace industry. A similar policy exists for Brest where French nuclear submarines are located. Read more about the French decision.

Overall, the UK policy will send a strong signal to the rest of Europe and the world that the use of Chinese equipment poses a security risk and should be limited. The UK and French decisions were developed to protect industries, institutions, and assets of national importance in specific geographical areas.

The U.S. model restricts its military from using Huawei and ZTE, regardless of location. Moreover, the Federal Communications Commission prohibits the use of its subsidies for the purchase of Huawei and ZTE equipment and is considering the requirement of removal of Huawei equipment for future subsidies.

Additional US policy restricts American firms from transacting business with Huawei for sensitive technologies. US telecom operators, noting the risk, have largely opted not for Huawei or ZTE, outside of a few exceptions. This is explained in Strand Consult’s research note The pressure to restrict Huawei from telecom networks is not driven by governments, but the many companies that have experienced hacking, IP theft, or espionage.

The UK new policy is a step in the right direction, and it underscores the need for greater scrutiny of technology from firms owned and/or affiliated with the Chinese government. The security risks are real and networks are key vulnerability. Indeed, scrutiny should extend beyond the network equipment to other vulnerable products and services; systems can be compromised by devices attached to networks as well as from software running over it. See Strand Consult’s research note “The debate about network security is more complex than Huawei. Look at Lenovo laptops and servers and the many other devices connected to the internet.”

Strand Consult expects that the security standards required for public safety networks will be strengthened and translated to commercial telecom networks. It is likely that some UK operators will claim that the new policy will be unduly expensive. Strand Consult examines such claims in the report ”The real cost to rip and replace Chinese equipment from telecom networks.”

Notably 2G / 3G / 4G equipment must be replaced anyway in the move toward 5G. Huawei is not the only vendor, and alternatives are price competitive. Moreover, when it comes to 5G, network rollout policy is far more consequential than the choice of equipment vendor. The view that Huawei is necessary for 5G is a myth; indeed, the US has taken a leadership position on 5G without using Huawei equipment.

Looking at the historical facts, it is not difficult to find operators which have swapped their networks with a new supplier. This need not come as a premium for shareholders. Strand Consult reviews the financial data and case studies from the major network swap it observed in 2010 – 2016.

The UK government, with Boris Johnson at the forefront, can improve the prospects for 5G in a meaningful way. In the UK, as in many other countries, it is both difficult and expensive to build mobile infrastructure. Strand Consult’s analysis show that the terms and costs associated with obtaining permits and leasing land for mobile masts and towers is artificially expensive. In the UK, operators have for many years and with limited success tried to change the terms.

In Denmark, on the other hand, Strand Consult has helped to create transparency so that authorities get the information they need to create the needed rollout policies. As a result,  the total rental costs for mobile operators have fallen by over 20 percent, and it has become significantly cheaper and easier to upgrade and build existing and new mobile infrastructure. Learn more about the project here ”How to deploy 5G: Best practices for infrastructure, regulation and business models.”

Huawei will likely claim that the UK decision doesn’t hurt its prospects. This is probably to save face. The fact is that Huawei will be subject to increased restriction and will not be able to enlarge its market share. Moreover, there is no change on the ZTE ban. The UK makes clear that Chinese equipment is not allowed in the core network. Moreover, when it comes to RAN, there are also strict limitations.

………………………………………………………………………………………………………………

In September 2018, a Canadian official argued that allowing Huawei to operate improves security. If a specific vendor’s equipment is compromised, having others in operation means less of the overall network is affected.

While Huawei will be breathing a sigh of relief at the UK’s decision – so will the country’s providers. In a statement, BT wrote:

“This decision is an important clarification for the industry. The security of our networks is an absolute priority for BT, and we already have a long-standing principle not to use Huawei in our core networks. While we have prepared for a range of scenarios, we need to further analyse the details and implications of this decision before taking a view of potential costs and impacts.”

All four of the UK’s major operators had already begun deploying 5G equipment from Huawei. Stripping Huawei’s gear and buying and installing replacements would have been costly and time-consuming.

Andrew Stark, cybersecurity director at Red Mosquito, said:

“With Huawei kit already integral to the UK 3G and 4G networks, shifting to 5G with them offers the path of least resistance and increases chances of telecom companies meeting tight roll-out targets. There are currently only two other tech players capable of providing hardware for 5G, namely Nokia and Ericsson.”

The UK says its decision was made after the NCSC “carried out a technical and security analysis that offers the most detailed assessment in the world of what is needed to protect the UK’s digital infrastructure.”

However, not all of the UK government will be so welcoming of today’s news. Conservative MP Bob Seely recently said “to all intents and purposes [Huawei] is part of the Chinese state” and involving the company would be “to allow China and its agencies access to our network.”

While UK intelligence officials clearly decided the benefits outweigh the risks, several concerns have been raised about Huawei’s equipment in recent years.

The dedicated Huawei Cyber Security Evaluation Centre (HCSEC) reported in 2018 that it could no longer offer assurance that the risks posed by the use of Huawei’s equipment could be mitigated following the “identification of shortcomings in Huawei’s engineering processes”. Concerns were raised about technical issues limiting security researchers’ ability to check internal product code and the sourcing of components from outside suppliers which are used in Huawei’s products.

follow-up report from HCSEC in March 2019 slammed Huawei as being slow to address concerns and claimed that “no material progress has been made by Huawei in the remediation of the issues reported last year, making it inappropriate to change the level of assurance from last year or to make any comment on potential future levels of assurance.”

Just a month earlier, the Royal United Services Institute (RUSI) – the world’s oldest independent think tank on international defence and security – warned about the use of Huawei equipment: “It is far easier to place a hidden backdoor inside a system than it is to find one,

“In the likely, but unacknowledged, battle between Chinese cyber attackers and the UK’s Huawei Cyber Security Evaluation Centre, the advantage and overwhelming resources lie with the former.”

The UK’s approach to Huawei has been decided, but it doesn’t feel like the end of the debate.

………………………………………………………………………………………………………….

References:

https://www.telecomstechnews.com/news/2020/jan/28/huawei-reprieve-uk-government-permits-5g-gear/

https://techcrunch.com/2020/01/28/uk-will-allow-huawei-to-supply-5g-with-tight-restrictions/

https://www.wsj.com/articles/u-k-allows-huawei-to-build-parts-of-5g-network-11580213316

5 thoughts on “U.K. Allows Huawei to Build Non Critical Parts of its 5G Network

  1. BT estimates the cost of the UK government’s decision to limit the use of Huawei’s telecoms equipment will be in the region of £500 million.

    The UK government made its decision about whether to allow Chinese vendor Huawei in national telecoms networks on Tuesday. Despite US-led concerns around security implications, the UK government decided to permit Huawei in a limited role.

    Philip Jansen, CEO of BT, said: “We are in the process of reviewing the guidance in detail to determine the full impact on our plans and at this time estimate an impact of around £500 million over the next five years.”

    Huawei’s equipment will be allowed in no more than 35 percent of the access network which connects devices and equipment to mobile phone masts. Furthermore, Huawei will not be permitted in any critical infrastructure or sensitive sites like nuclear sites and military bases.

    In a statement following the government’s decision, BT wrote: “This decision is an important clarification for the industry. The security of our networks is an absolute priority for BT, and we already have a long-standing principle not to use Huawei in our core networks. While we have prepared for a range of scenarios, we need to further analyse the details and implications of this decision before taking a view of potential costs and impacts.”

    The UK says its decision was made after its National Cyber Security Centre “carried out a technical and security analysis that offers the most detailed assessment in the world of what is needed to protect the UK’s digital infrastructure.”

    American officials had urged the UK to ban equipment from the Chinese vendor over national security concerns. US officials issued their British counterparts with a dossier earlier this month highlighting alleged risks.

    The UK has always maintained that any decision on Huawei would be evidence-led and based on its own reviews, but the result is nonetheless likely to anger its closest ally. However, as the UK leaves the EU on Friday, it’s a clear sign the country will act independently and not at the behest of American or European influence.

    Victor Zhang, Vice President of Huawei, said:

    “Huawei is reassured by the UK government’s confirmation that we can continue working with our customers to keep the 5G roll-out on track. This evidence-based decision will result in a more advanced, more secure and more cost-effective telecoms infrastructure that is fit for the future. It gives the UK access to world-leading technology and ensures a competitive market.

    We have supplied cutting-edge technology to telecoms operators in the UK for more than 15 years. We will build on this strong track record, supporting our customers as they invest in their 5G networks, boosting economic growth and helping the UK continue to compete globally.

    We agree a diverse vendor market and fair competition are essential for network reliability and innovation, as well as ensuring consumers have access to the best possible technology.”

    All four of the UK’s major operators are using Huawei’s equipment in their networks. Providers like BT now have a task on their hands complying with the government’s requirements.

    Although much less than if the British providers were forced to remove all of Huawei’s equipment from their networks, BT’s estimate shows the UK government’s decision is not devoid of cost.

    https://www.telecomstechnews.com/news/2020/jan/30/bt-uk-gov-decision-limit-huawei-gear-cost-500m/

  2. Huawei promises ‘Made in Europe’ 5G for EU
    Huawei’s announcement comes just days after the EU recommended that member states could ban telecoms operators deemed a security risk from critical parts of 5G infrastructure.

    Chinese telecom giant Huawei said on Tuesday it would set up manufacturing hubs in Europe, as it tries to fight off US pressure on EU nations to stop it from operating.

    “Huawei is more committed to Europe than ever before,” said the company’s top executive for Europe Abraham Liu during a Chinese New Year reception in Brussels.

    “That’s why we have decided we want to set up manufacturing bases in Europe — so that we can truly have 5G for Europe made in Europe.”

    The announcement comes just days after the EU recommended that member states could ban telecoms operators deemed a security risk from critical parts of 5G infrastructure.

    https://telecom.economictimes.indiatimes.com/news/huawei-promises-made-in-europe-5g-for-eu/73949631

  3. How the US buying Ericsson or Nokia would impact networking, by Peter Newman of Business Insider

    Following the UK’s decision to allow wireless network operators to source noncore equipment from Huawei, US officials are considering buying a competitor to the Chinese supplier, such as Ericsson or Nokia.

    US Attorney General William Barr outlined steps the US is considering encouraging or taking to counter Huawei’s prominence – with the overall goal of ensuring that 5G networks remain secure and the US maintains global technological leadership.

    Barr’s statements laid out two potential courses of action that the US could take to blunt Huawei’s dominance in the global networking equipment market. He said:

    “We have to make a decision on the horse we’re going to ride in this race. Who is the 5G equipment supplier or suppliers that we will rely on to compete against Huawei around the globe, to win contracts from operators and blunt Huawei’s drive to domination. … These concerns could be met by the United States aligning itself with Nokia and/or Ericsson through American ownership of a controlling stake, either directly or through a consortium of private American and allied companies. Putting our large market and financial muscle behind one or both of these firms would make it a far more formidable competitor and eliminate concerns over its staying power or their staying power.”

    The overall goal of the options Barr outlined is to ensure that 5G networks remain secure and the US maintains global technological leadership. And were the US to buy a Scandinavian networking vendor directly or work with private interests to convince them to do so, it would radically transform the global wireless networking market.

    https://www.businessinsider.com/us-could-buy-ericsson-nokia-to-compete-against-huawei-report-2020-2?

  4. Huawei Is Winning the Argument in Europe, as the U.S. Fumbles to Develop Alternatives
    Germany seems poised to follow Britain in letting the Chinese maker build next-generation networks, despite last appeals from the United States.

    America’s global campaign to prevent its closest allies from using Huawei, the Chinese telecom giant, in the next generation of wireless networks has largely failed, with foreign leaders publicly rebuffing the United States argument that the firm poses an unmanageable security threat.

    Britain has already called the Trump administration’s bluff, betting that officials would back away from their threat to cut off intelligence sharing with any country that used Huawei equipment in its network. Apart from an angry phone call between President Trump and Prime Minister Boris Johnson, Britain appears to be paying no price for its decision to let Huawei into limited parts of its network, under what the British say will be rigorous surveillance.

    Germany now appears ready to follow a similar path, despite an endless stream of cajoling and threats by Secretary of State Mike Pompeo, Defense Secretary Mark T. Esper and other U.S. officials at a global security conference in Munich last weekend.

    In public speeches and private conversations, Mr. Pompeo and Mr. Esper continued to hammer home the dangers of letting a Chinese firm into networks that control critical communications, saying it would give the Chinese government the ability to spy on — or, in times of conflict, turn off — those networks. The security risks are so severe, they warned, that the United States would no longer be able to share intelligence with any country whose network uses Huawei.

    https://www.nytimes.com/2020/02/17/us/politics/us-huawei-5g.html

  5. Trump Extends Huawei Ban:
    President Trump inked an extension to the US government’s ban on American companies’ business with China’s Huawei. The move essentially prevents US companies from doing business with Huawei through May 2021.

    As Reuters reported, the action invokes the International Emergency Economic Powers Act, positioning China’s Huawei and ZTE as threats to national security. According to Reuters, the US Commerce Department is also preparing to extend the waivers it has provided to select US companies that will allow them to continue working with Huawei.

    Hanging over the situation is the ongoing US-China trade war, a situation now further complicated by the COVID-19 pandemic that originated in China.

    Trump’s action is noteworthy in light of a number of new developments, including reports that US companies may be given a green light to work with Huawei and other Chinese companies on 5G standards. And, separately, there are ongoing discussions about a government-funded program to pull Huawei equipment out of some US wireless operator networks and replace it with equipment from “trusted” suppliers.

    https://www.lightreading.com/security/trump-extends-huawei-ban-to-may-2021/d/d-id/759625?

Comments are closed.