Fifth Generation (5G) Telecommunications Systems

Classification: Unclassified

Branch/Agency: NCSB

Proposed Response:

If pressed on the security of current networks:

Background:

Wireless systems are the modern infrastructure on which the global data driven economy is built. The global telecommunications sector is undergoing a transition from fourth generation wireless technology to fifth generation (5G). 5G networks will operate at significantly higher speeds and will provide greater versatility, capability, and complexity than previous generations. As a result, 5G systems will become a crucial component of Canada’s critical infrastructure. Although the full implementation of 5G in Canada’s telecommunications sector will take several years, some major telecommunications service providers (TSPs) have begun announcing the initial vendors whose equipment will be used to build their 5G systems, including Rogers (Ericsson), Vidéotron (Samsung), and Bell (Nokia). 5G spectrum auctions will continue throughout 2020.

It is anticipated that 5G technology will enable applications and innovations resulting in many new economic opportunities for Canada such as those associated with the Internet of Things, connected and automated vehicles, and remote surgeries. However, in order to leverage this opportunity for economic growth through 5G, the safety and security of the technology must be ensured. 

Incidents resulting from the exploitation of vulnerabilities by malicious actors will be more difficult to safeguard against, and could have a broader impact than in previous generations of this technology.

The Government of Canada is conducting an ongoing examination of emerging 5G technology and the associated economic opportunities and security risks. Particular consideration is being afforded to foreign and defence policy, economic, legal, national security, and technical implications. Public Safety Canada (PS), Innovation, Science and Economic Development Canada (ISED), the Communications Security Establishment (CSE), the Canadian Security Intelligence Service (CSIS), the Department of National Defence (DND), Global Affairs Canada (GAC) and the Privy Council Office (PCO) have been working closely to consider every dimension to this complex situation.

International

The security of 5G wireless systems has been at the forefront of domestic and international media stories. Canada’s Five Eyes partners have all made public announcements on how they plan to protect 5G wireless telecommunications networks. These policies range in specificity from the naming of specific entities to generic statements of intent to bolster security.

On 28 January 2020, the United Kingdom (UK) announced that high risk vendors would be excluded from the sensitive elements of their networks, and limited to a minority presence of no more than 35 percent in the less sensitive elements of its networks. The UK is expected to introduce legislation at the earliest opportunity to put in place the powers necessary to implement this framework. Complimentary to the framework, the UK is developing a diversification strategy to vary the supply of equipment in their telecommunications networks.

The United States has been Canada’s most vocal partner, strongly encouraging countries to carefully weigh the security considerations of 5G technology. Outside of the Five Eyes, several    like-minded countries are also carefully considering what equipment will provide acceptable levels of security for their network infrastructure.

Current Network Security

In the context of current 3G/4G/LTE networks, a Canadian Security Review Program is in place to mitigate cyber security risks. CSE actively engages with Canadian TSPs and equipment vendors to help ensure the security of today’s existing Canadian telecommunications infrastructure.

The program has been in place since 2013, and has helped mitigate risks stemming from designated equipment and services under consideration for use in Canadian 3G/4G/LTE telecommunications networks, including Huawei. To date, this program has led to:

As the rollout of 5G technology in Canada continues, the expertise and experience developed through the Security Review Program will be important in assessing cyber threats and risks of emerging technology. 

Contacts:

Prepared by: Gregory Bunghardt, A/Manager, National Cyber Security Directorate, 613-990-9608 / 613-558-8231(c)

Approved by: Dominic Rochon, Senior Assistant Deputy Minister, 613-990-4976

Date modified: