The UK will allow “high-risk vendors” like Huawei to supply equipment for its 5G network infrastructure, the government announced today. The announcement outlining the limitations imposed on high risk vendors was made after weeks of speculation about the company’s role in the UK’s 5G infrastructure. All four of the UK’s major operators are already using the company’s equipment in their 5G networks.
The announcement defines high-risk vendors as those that “pose greater security and resilience risks to UK telecoms networks.” It says that the country’s National Cyber Security Centre will issue guidance to UK telcos on high-risk vendors who will be allowed to supply non-core elements of the network, but will be limited by a market share cap of 35 percent, which the government hopes will stop the country from becoming overly reliant on their equipment. Such vendors will be excluded entirely from security critical core parts of the network, as well as sensitive geographic locations like military bases.
The country’s Digital Secretary Baroness Morgan said that the decision would strike a balance between enabling infrastructure upgrades, without compromising national security. “High risk vendors never have been and never will be in our most sensitive networks,” she said, adding that the decision “Paves the way for secure and resilient networks, with our sovereignty over data protected, but it also builds on our strategy to develop a diversity of suppliers.”
The announcement is likely to anger officials in the Trump administration who have banned government use of Huawei’s tech, and have prevented American firms from doing business with the company, citing national security concerns. The administration has since been lobbying fiercely for the UK to ban Huawei’s involvement in its 5G infrastructure. As recently as last Friday, the Financial Times reported that President Donald Trump personally discussed the issue with Prime Minister Boris Johnson in a phone call.
Network operators have previously drawn a distinction between core and non-core parts of their network as a means of segmenting security. The non-core network mainly covers wireless access points (rather than data stations and the interconnecting backhaul) which can be more easily isolated and secured. BT, for example, has removed Huawei equipment from the core of EE’s mobile network infrastructure, but has allowed it to be used elsewhere.
US national security adviser Robert O’Brien told the Financial Times that allowing Huawei into the UK’s 5G networks risks giving China access to the “most intimate” details of British citizens. “It is somewhat shocking to us that folks in the UK would look at Huawei as some sort of a commercial decision. 5G is a national security decision,” O’Brien said.
The UK will have to face the consequences of ignoring the USA’s pleas as early as Friday January 31st, when it leaves the European Union and starts the process of negotiating its own trade deals; of which the US deal will be one of the most important.
There could also be consequences for intelligence sharing. According to Politico, the US No. 3 House Republican leader Liz Cheney said that the US will have to “recalculate [and] reassess whether or not they can continue to be among the closest of our intel partners” if the UK approves the use of Huawei in their 5G networks. The UK and US are members of the “Five Eyes” intelligence sharing agreement along with Canada, Australia, and New Zealand.
While the US has been pushing for a ban, the UK’s telcos have been pushing back. In particular, Vodafone has argued that a complete Huawei ban would set back the country’s 5G infrastructure and Prime Mininister Boris Johnson has said that there is a lack of alternatives to its equipment. A ban would also be costly for the telcos who are already using Huawei’s equipment in their networks. Vodafone has said it would cost the company “hundreds of millions” to strip the equipment out.