The draft Telecom Security Policy is believed to state that all network gear makers and operators should assist in meeting the government?s objective of promoting local equipment manufacturing .
The proposed policy recommends that mobile phone companies be permitted to purchase hardware and software from trusted sources only, a list of which will be complied by the Department of Telecommunications (DoT). The draft also adds that all core hardware required for telecom networks must be installed only on the certification of a standard testing organisation, irrespective of the origin of the equipment.
It also suggests a periodic audit of the networks of all mobile phone companies by security agencies, government wings or reputed international agencies for various security breaches.
Further, the draft also states that several new regulations will be enacted to enable law enforcement agencies to legally track communications, messages and data on a real-time basis without transgressing on citizens? privacy
The new policy is also expected to address the government’s concerns pertaining to communication mediums such as Gmail, BlackBerry services, Nokia’s email server, Skype, etc, which cannot be tracked by enforcement agencies on a real-time basis as the new framework may require operators who offer such services to either re-locate their servers to the country or share encryption keys and assist security agencies in monitoring these services.
Prior to this, DoT had said that the solution to these security issues should involve intelligence agencies building up capabilities indigenously to monitor and intercept these technologies.
It had also suggested that security agencies collaborate with companies like Infosys, TCS, Wipro and Tech Mahindra to build such capabilities. The new framework also promotes more stringent norms for remote access, or the provision to monitor data and voice traffic on cellular networks from remote locations across the globe and proposed that this facility be carried out only from within the country.
DoT has already circulated the draft policy to all its members who have been asked to submit their views by September 6, 2011.
