Thursday, August 5, 2010

For data, tug-of-war intensifies over privacy versus security


The threat by the United Arab Emirates to shut down mobile services on BlackBerrys like e-mail and text messaging underscores a growing tension between communications companies and governments over how to balances privacy with national security.



While communications companies want to be able to ensure that their customers' messages are shielded from prying eyes, governments increasingly insist on gaining access to electronic messages to track down criminals or uncover terrorist plots.

On Monday, Research In Motion, or RIM, the Canadian company that makes the BlackBerry line of smartphones, sought to reassure its customers that its services remained secure a day after the UAE said it would ban many BlackBerry services because of national security concerns.

Internet security experts say the demands by the United Arab Emirates for certain access to communications flowing across the BlackBerry network echo requests of other governments around the world.

Many countries have laws and regulations requiring telecommunications providers to grant government agencies access to their systems for court-sanctioned intercepts.

The demands als\ronic communications providers are increasingly offering security measures like encryption. For instance, after a cyberattack that originate in China and that targeted Google's servers and Gmail, the company began encrypting by default all e-mail messages while in transit.

As a growing volume of communications content is encrypted, governments are demanding other information like whom customers communicate with and when, said Mr. Rutkowski. Such information can be useful to help gather intelligence.

Security experts say that BlackBerry's service, which uses its own network to transmit e-mail and instant messages, may make access to such data more difficult, especially for countries in which the company has no serves controlling that network. The experts also say that is why Research In Motion (RIM) has had frequent confrontations with governments. Other services, like Skype, have also raised concerns in some countries.

Research In Motion issued a statement on Monday that did not directly address the company's conflict with the United Arab Emirates of its relationship with other countries, citing the "confidential nature" of its discussions with certain governments. The company said it balanced competing demands. " RIM respects both the regulatory requirements of government and the security and privacy needs of corporations and consumers," the company said in statement.

In an open letter to customers, RIM, which operators in more than 175 countries, also said that its security system was designed to ensure that no one, not even the company, could gain unauthorized access to customers' data.

Security experts said that it was not clear what kind of access requirements the United Arab Emirates had requested from RIM and whether those requirements were more onerous than those mandated by other governments.

"There is a lot going on that we are not seeing," said Bruce Schneier, chief security technology officer for BT, the giant telecommunications provider based in Britain. "We don't know what RIM. does for other countries."

Experts also say that the United Arab Emirates, a major business center in the Middle East, may be focusing on BlackBerry's service, rather than Gmail or other encrypted services, because it is being offered by local telecommunications carriers and has grown increasingly popular there.

The BlackBerry service is a frequent target because of "its convenience, its widespread use and the fact that it runs on its own network," said Marc Rotenberg, executive director of the Electronic Privacy advocacy group based in Washington. "The United Arab Emirates is not in much of a position to tell Google not to encrypt e-mail.

Many analysts agreed that the Emirati government appeared more interested in getting some concessions from RIM than in actually shutting off access to BlackBerry data services. The government said the telephone service would not be affected.

No comments:

Post a Comment