XM은(는) 미국 국적의 시민에게 서비스를 제공하지 않습니다.

US probing China Telecom, China Mobile over internet, cloud risks



<html xmlns="http://www.w3.org/1999/xhtml"><head><title>EXCLUSIVE-US probing China Telecom, China Mobile over internet, cloud risks</title></head><body>

Adds lawmaker comment

By Alexandra Alper

WASHINGTON, June 24 (Reuters) -The Biden administration is investigating China Mobile, China Telecom and China Unicom over concerns the firms could exploit access to American data through their U.S. cloud and internet businesses by providing it to Beijing, three sources familiar with the matter said.

Authorities at the Commerce Department are running the investigation, which has not been previously reported. They have subpoenaed the state-backed companies and have completed "risk-based analyses" of China Mobile 0941.HK and China Telecom 0728.HK, but are not as advanced in their probe of China Unicom 0762.HK, the people said, declining to be named because the probe is not public.

The companies still have a small presence in the United States, for example, providing cloud services and routing wholesale U.S. internet traffic. That gives them access to Americans' data even after telecom regulators barred them from providing telephone and retail internet services in the United States.

The Chinese companies and their U.S.-based lawyers did not respond to requests for comment. The Justice Department declined to comment and the White House referred questions to Commerce, which declined to comment. The Chinese Embassy in Washington said it hopes the United States will "stop suppressing Chinese companies under false pretexts," adding that China will continue to defend the rights and interests of Chinese companies.

Reuters found no evidence the companies intentionally provided sensitive U.S. data to the Chinese government or committed any other type of wrongdoing.

The investigation is the latest effort by Washington to prevent Beijing from exploiting Chinese firms' access to U.S. data to harm companies, Americans or national security, as part of a deepening tech war between the geopolitical rivals. It shows the administration is trying to shut down all remaining avenues for Chinese companies already targeted by Washington to obtain U.S. data.

Regulators have not yet made decisions about how to address the potential threat, two of the people said. But, equipped with the authority to probe internet services sold into the U.S. by companies from "foreign adversary" nations, regulators could block transactions allowing them to operate in data centers and route data for internet providers, the sources said.

Blocking key transactions, in turn, could degrade the Chinese firms' ability to offer competitive American-facing cloud and internet services to global customers, crippling their remaining U.S. businesses, experts and sources said.

"They are our chief global adversary and they are very sophisticated," said Doug Madory, an internet routing expert at internet analysis firm Kentik. "I think (U.S. regulators) would not feel like they were doing their job if they weren't trying to shore up every risk."

ROUTING THROUGH CHINA

China Telecom, China Mobile and China Unicom have long been in Washington's crosshairs. The FCC denied China Mobile's application to provide telephone service in 2019 and revoked China Telecom and China Unicom's licenses to do the same in 2021 and 2022 respectively. In April, the FCC went further and barred the companies from providing broadband service. A spokesman for the FCC said the agency stands by its concerns.

One factor in the FCC's decision was a 2020 report from other U.S. government agencies that recommended revoking China Telecom's license to provide U.S. telephone service. It cited at least nine instances where China Telecom misrouted internet traffic through China, putting it at risk of being intercepted, manipulated or blocked from reaching its intended destination.

"China Telecom's U.S. operations... provide Chinese government-sponsored actors with openings to disrupt and misroute U.S. data and communications traffic," authorities said at the time.

China Telecom has previously denied the government's allegations and told U.S. agencies that routing problems are common and occur on all networks.

The telecoms company sought to reverse the FCC decision, but a U.S. appeals court rejected its arguments, noting that the agencies presented "compelling evidence that the Chinese government may use Chinese information technology firms as vectors of espionage and sabotage."

The Commerce Department "must rigorously use its...authorities to protect U.S. data and infrastructure from Chinese companies like China Telecom," Republican congressman and chairman of the House Foreign Services Committee Michael McCaul said in a statement to Reuters. "As one of our top adversaries, China cannot and should not ever be trusted to have access to Americans’ private data,” he added.

China Telecom and its U.S. attorney did not immediately respond to requests for comment on his remarks.

ACCESS POINTS, CLOUD UNDER SCRUTINY

The Chinese telecoms companies' reach extends deep inside the U.S. internet infrastructure.

According to its website, China Telecom has 8 American Points of Presence (PoPs) that sit at internet exchange points, which allow large-scale networks to connect to each other and share routing information.

China Telecom did not respond to requests for comment about its U.S. based PoPs.

According to the FCC, there are "serious national security and law enforcement risks" posed by PoPs when operated by firms that pose a national security risk. In cases where China Telecom's PoPs reside in internet exchange points, the company "can potentially access and/or manipulate data where it is on the preferred path for U.S. customer traffic," the FCC said in April.

Bill Woodcock, executive director of Packet Clearing House,the intergovernmental treaty organization which is responsible for the security of critical Internet infrastructure, said traffic flowing through these points would be vulnerable to metadata analysis, which can capture key information about the data's origin, destination, size and timing of delivery. They also might allow for deep packet inspection, where parties can glimpse the data's contents, and even decryption.

Commerce investigators are also probing the companies' U.S. cloud offerings, the focus of the 2020 referral from the Justice Department on China Mobile, China Telecom and Alibaba that prompted the investigations, the people said. The probe was later expanded to include PoPs and China Unicom, whose cloud business was small at the time of the referral, two of people added. Alibaba did not respond to a request for comment.

Regulators fear that the companies could access personal information and intellectual property stored in their clouds and provide it to the Chinese government or disrupt Americans' access to it, two of the sources said.

Chinese "cloud providers pose an unacceptable national security risk and should not be allowed to operate in the United States," Republican Congressman John Moolenaar, who chairs the House Select Committee on China, said in a statement. "I urge the administration to expand its investigation to include all (Chinese) cloud providers," he added.

Commerce department officials are particularly concerned about one data center that is part owned by China Mobile in California's Silicon Valley, according to one of the sources.

China Mobile did not respond to requests for comment about the data center.

Reuters could not determine the reason for the government's specific interest in China Mobile's data center, but ownership of one provides greater opportunity to mishandle client data, according to Bert Hubert, a Dutch cloud computing expert and former member of a board that regulates Dutch Intelligence and security agencies.

He noted that ownership would make it easier to meddle with clients' servers at night, for example, by installing backdoors to enable remote access or bypass encryption. Those actions would be much tougher in a data center with strict security policies where the company merely leases space.

"If you have your own data center you have your own unique piece of China within the U.S.," he said.




Reporting by Alexandra Alper; Additional reporting by David Shepardson and Casey Hall; Editing by Chris Sanders and Anna Driver

</body></html>

면책조항: XM Group 회사는 체결 전용 서비스와 온라인 거래 플랫폼에 대한 접근을 제공하여, 개인이 웹사이트에서 또는 웹사이트를 통해 이용 가능한 콘텐츠를 보거나 사용할 수 있도록 허용합니다. 이에 대해 변경하거나 확장할 의도는 없습니다. 이러한 접근 및 사용에는 다음 사항이 항상 적용됩니다: (i) 이용 약관, (ii) 위험 경고, (iii) 완전 면책조항. 따라서, 이러한 콘텐츠는 일반적인 정보에 불과합니다. 특히, 온라인 거래 플랫폼의 콘텐츠는 금융 시장에서의 거래에 대한 권유나 제안이 아닙니다. 금융 시장에서의 거래는 자본에 상당한 위험을 수반합니다.

온라인 거래 플랫폼에 공개된 모든 자료는 교육/정보 목적으로만 제공되며, 금융, 투자세 또는 거래 조언 및 권고, 거래 가격 기록, 금융 상품 또는 원치 않는 금융 프로모션의 거래 제안 또는 권유를 포함하지 않으며, 포함해서도 안됩니다.

이 웹사이트에 포함된 모든 의견, 뉴스, 리서치, 분석, 가격, 기타 정보 또는 제3자 사이트에 대한 링크와 같이 XM이 준비하는 콘텐츠 뿐만 아니라, 제3자 콘텐츠는 일반 시장 논평으로서 "현재" 기준으로 제공되며, 투자 조언으로 여겨지지 않습니다. 모든 콘텐츠가 투자 리서치로 해석되는 경우, 투자 리서치의 독립성을 촉진하기 위해 고안된 법적 요건에 따라 콘텐츠가 의도되지 않았으며, 준비되지 않았다는 점을 인지하고 동의해야 합니다. 따라서, 관련 법률 및 규정에 따른 마케팅 커뮤니케이션이라고 간주됩니다. 여기에서 접근할 수 있는 앞서 언급한 정보에 대한 비독립 투자 리서치 및 위험 경고 알림을 읽고, 이해하시기 바랍니다.

리스크 경고: 고객님의 자본이 위험에 노출 될 수 있습니다. 레버리지 상품은 모든 분들에게 적합하지 않을수 있습니다. 당사의 리스크 공시를 참고하시기 바랍니다.