Fifth Generation (5G) Telecommunications Systems
Classification: Unclassified
Branch/Agency: NCSB
Proposed Response:
- Protecting the critical systems and infrastructure Canadians rely on every day, including Canada’s telecommunications systems, is a major priority for the Government of Canada.
- While we cannot comment on specific companies, an examination of emerging 5G technology and the associated security, economic and geopolitical considerations is underway.
- Public Safety, the Communications Security Establishment, the Department of National Defence, the Canadian Security Intelligence Service, Global Affairs Canada, and Innovation, Science, and Economic Development are working together on this important issue.
- We recognize that our allies, particularly the United Kingdom, have made recent announcements for securing their 5G telecommunications systems. The Government will pursue an approach that is appropriate for Canadians while taking into consideration our Allies’ advice.
If pressed on the security of current networks:
- The Government of Canada takes the security of Canada’s telecommunications networks seriously. Since 2013, the Canadian Security Review Program has worked to mitigate the cyber security risks stemming from designated equipment and services, including Huawei, in 3G/4G and LTE networks.
- The Government will continue to work with telecommunications service providers and vendors to mitigate security risks in current and future networks as 5G technology is adopted by Canadians.
Background:
Wireless systems are the modern infrastructure on which the global data driven economy is built. The global telecommunications sector is undergoing a transition from fourth generation wireless technology to fifth generation (5G). 5G networks will operate at significantly higher speeds and will provide greater versatility, capability, and complexity than previous generations. As a result, 5G systems will become a crucial component of Canada’s critical infrastructure. Although the full implementation of 5G in Canada’s telecommunications sector will take several years, some major telecommunications service providers (TSPs) have begun announcing the initial vendors whose equipment will be used to build their 5G systems, including Rogers (Ericsson), Vidéotron (Samsung), and Bell (Nokia). 5G spectrum auctions will continue throughout 2020.
It is anticipated that 5G technology will enable applications and innovations resulting in many new economic opportunities for Canada such as those associated with the Internet of Things, connected and automated vehicles, and remote surgeries. However, in order to leverage this opportunity for economic growth through 5G, the safety and security of the technology must be ensured.
Incidents resulting from the exploitation of vulnerabilities by malicious actors will be more difficult to safeguard against, and could have a broader impact than in previous generations of this technology.
The Government of Canada is conducting an ongoing examination of emerging 5G technology and the associated economic opportunities and security risks. Particular consideration is being afforded to foreign and defence policy, economic, legal, national security, and technical implications. Public Safety Canada (PS), Innovation, Science and Economic Development Canada (ISED), the Communications Security Establishment (CSE), the Canadian Security Intelligence Service (CSIS), the Department of National Defence (DND), Global Affairs Canada (GAC) and the Privy Council Office (PCO) have been working closely to consider every dimension to this complex situation.
International
The security of 5G wireless systems has been at the forefront of domestic and international media stories. Canada’s Five Eyes partners have all made public announcements on how they plan to protect 5G wireless telecommunications networks. These policies range in specificity from the naming of specific entities to generic statements of intent to bolster security.
On 28 January 2020, the United Kingdom (UK) announced that high risk vendors would be excluded from the sensitive elements of their networks, and limited to a minority presence of no more than 35 percent in the less sensitive elements of its networks. The UK is expected to introduce legislation at the earliest opportunity to put in place the powers necessary to implement this framework. Complimentary to the framework, the UK is developing a diversification strategy to vary the supply of equipment in their telecommunications networks.
The United States has been Canada’s most vocal partner, strongly encouraging countries to carefully weigh the security considerations of 5G technology. Outside of the Five Eyes, several like-minded countries are also carefully considering what equipment will provide acceptable levels of security for their network infrastructure.
Current Network Security
In the context of current 3G/4G/LTE networks, a Canadian Security Review Program is in place to mitigate cyber security risks. CSE actively engages with Canadian TSPs and equipment vendors to help ensure the security of today’s existing Canadian telecommunications infrastructure.
The program has been in place since 2013, and has helped mitigate risks stemming from designated equipment and services under consideration for use in Canadian 3G/4G/LTE telecommunications networks, including Huawei. To date, this program has led to:
- excluding designated equipment in sensitive areas of Canadian networks;
- mandatory assurance testing in independent third-party laboratories for designated equipment before use in less sensitive areas of Canadian networks; and,
- restricting outsourced managed services across government networks and other Canadian critical networks.
As the rollout of 5G technology in Canada continues, the expertise and experience developed through the Security Review Program will be important in assessing cyber threats and risks of emerging technology.
Contacts:
Prepared by: Gregory Bunghardt, A/Manager, National Cyber Security Directorate, 613-990-9608 / 613-558-8231(c)
Approved by: Dominic Rochon, Senior Assistant Deputy Minister, 613-990-4976
- Date modified: