UN deep packet inspection standard leaked

Powered by SC Magazine
 

But UN approval no green light to censorship.

The United Nations has approved a standard for deep packet inspection (DPI) technology in next generation networks that has some privacy pundits up in arms.

The draft document (pdf), obtained by SC from Melbourne online advocate Asher Wolf and available only to members of the International Telecommunications Union (ITU), described the Y.2770 standard into the uses of DPI which was approved by the UN body yesterday. 

 

Examples given include using the technology on next-gen networks to monitor for traffic like BitTorrent, instant messaging and Session Initiated Protocol (SIP), widely used for voice and video.

While it does not go further than describe the technology, the document nonethless has caused a stir.  Many fear the approval brings state internet surveillance a step closer.

"Germany holds the belief that the ITU-T should in principle not standardise any technical means that would increase the exercise of control over telecommunications content, could be used to empower any censorship of content, or could impede the free flow of information and ideas," reads a statement on the CEPT website. The CEPT is a group of European telcos and postal organisations.

"The ITU-T shall rather focus its resources and programmes on … facilitating peaceful relations, international cooperation among peoples and economic and social development by telecommunications services."

The approval of the standard does not give a green light to the use of DPI on national networks, which as local telco security boffins point out to SC would be difficult to operate and need legal go-ahead in most western states.

But as some privacy pundits including Petter Ericson of Sweden's Academic Computer Club University point out, the standards could make it easier for governments to outsource DPI within internet providers.

"It is a very technical document for the most part, and does not really deal with all the implications of DPI. Thankfully, it also does nothing to mandate this kind of equipment in any way," Ericson wrote on a mailing list.

"However, thinking further, I could definitely see how later standards could refer to Y.2770 to mandate a DPI functional entity at some specific point, or, even more likely, that governments could ... hire some large telco to run networks and mandate use of Y.2770 compatible DPI equipment.

"That, I think, is the main danger posed by this document."

Copyright © SC Magazine, Australia


UN deep packet inspection standard leaked
 
 
 
Top Stories
Innovating in the sleepy super industry
There’s little incentive to be on the bleeding edge, so why is Andrew Todd fighting so hard?
 
How technology will unify Toll
The systems headache formed through 15 years of acquisitions.
 
Immigration breached Privacy Act with data leak
Pilgrim slams "copy and paste" of asylum seeker data.
 
 
Sign up to receive iTnews email bulletins
   FOLLOW US...
Latest Comments
Polls
Who do you trust most to protect your private data?







   |   View results
Your bank
  38%
 
Your insurance company
  3%
 
A technology company (Google, Facebook et al)
  7%
 
Your telco, ISP or utility
  8%
 
A retailer (Coles, Woolworths et al)
  2%
 
A Federal Government agency (ATO, Centrelink etc)
  20%
 
An Australian law enforcement agency (AFP, ASIO et al)
  15%
 
A State Government agency (Health dept, etc)
  5%
TOTAL VOTES: 844

Vote