Huawei and ZTE pass first phase of GSMA/3GPP security accreditation

A network security accreditation scheme jointly run by MNO lobby group GSMA and wireless standards body 3GPP has given Chinese vendors the seal of approval.

The scheme is called the Network Equipment Security Assurance Scheme (NESAS) and claims to have been developed to boost the industry’s confidence in telecom network equipment and to jointly promote the development of more aligned mobile communications market. All the big kit vendors passed the first phase, which consists of an assessment of their product development and lifecycle management processes.

“The GSMA recognises the support and participation of Ericsson, Huawei, Nokia and ZTE who have satisfied the scheme’s security requirements via an independent security audit and we congratulate them on achieving this important first step,” said Alex Sinclair, GSMA CTO. “By committing to NESAS, vendors are helping network operators, and other stakeholders make informed decisions about secure product development. We look forward to others participating in the scheme, evidencing their commitment to good security practice by promoting a security-by-design culture within the industry.”

The second phase will involve vendors submitting network equipment products to qualified test laboratories for evaluation. To what extent that process will offer significant reassurances about the security status of the entire portfolio is questionable, but failure at any stage of the NESAS will represent a significant setback for the vendor concerned.

Unsurprisingly Huawei has wasted little time in seeking to capitalise on this security endorsement. “GSMA NESAS is the latest approach in assessing the network security of mobile communications,” said Devin Duan, Head of 5G E2E Cybersecurity Marketing at Huawei. “In the 5G era, NESAS provides a standardized and effective cyber security assessment, which allows the communications industry to ensure fairness.

“The Assessment is also a valuable reference for stakeholders, such as operators, equipment vendors, government regulators, and application service providers. Huawei has always focused on technology-driven cyber security. We welcome NESAS with full support and collaboration. We also invite the entire industry to jointly promote the development of a more aligned mobile communications market.”

It seems unlikely that the NESAS will sway the US and its allies at all, since Huawei and ZTE have been found guilty of being Chinese and no amount of security transparency have aided their defence. It does, however, provide Huawei with another weapon to use in the battle for public sympathy, just so long at the process doesn’t raise any alarm bells.