Bulk encryption of messages by Telcos not allowed under Unified License: Devusinh Chauhan

The Minister of State for Communications Devusinh Chauhan today in Lok Sabha said that bulk encryption of messages by telecom service providers is not allowed under the Unified License (UL). As per a clause in the Unified License Agreement, licensees are barred from employing bulk encryption equipment in their telecom network.

“The Unified License does not allow bulk encryption of messages by Telecom Service Providers (TSPs). The relevant clause of Unified License Agreement is reproduced,” said Devusinh Chauhan.

“37.1 The Licensee shall not employ bulk encryption equipment in its network. Licensor or officers specially designated for the purpose may evaluate any encryption equipment connected to the Licensee’s network. However, the Licensee shall have the responsibility to ensure the protection of privacy of communication and to ensure that unauthorized interception of MESSAGE does not take place.”

Unified License Agreement

He further added that telecom service providers currently use 3GPP/3GPP2 security standards to safeguard the privacy and confidentiality of individual messages.

“To safeguard the privacy and confidentiality of the individual message, Telecom Service Providers use the encryption mechanisms as per 3GPP/ 3GPP2 security standards. The relevant clause of Unified License Agreement is reproduced,” added Devusinh Chauhan.

“39.7 The LICENSEE shall induct only those network elements into its telecom network, which have been got tested as per relevant contemporary Indian or International Security Standards e.g. IT and IT-related elements against ISO/IEC 15408 standards, for Information Security Management System against ISO 27000 series Standards, Telecom and Telecom related elements against 3GPP security standards, 3GPP2 security standards etc. The certification shall be got done only from authorized and certified agencies/ labs in India or as may be specified by the Licensor. The copies of test results and test certificates shall be kept by the LICENSEE for 10 years from the date of procurement of equipment.”

Unified License Agreement