RIM reacts to Indian BlackBerry data interception reports

RIM has reiterated that the security architecture for BlackBerry Enterprise Server (BES) is the same around the world and the company has no ability to provide its customers' encryption keys.

The Canada-based company was responding to reports by the India Times that RIM had offered lawful interception in its security architecture through cloud computing.

The newspaper reports a reference to an "internal note" from the Home Ministry in India that mentions a "network data analysis system". A company spokesman said this is the name of a tool required to allow carriers in India to provide lawful access to RIM's consumer services, including BlackBerry Messenger (BBM), but does not enable access to highly secure corporate e-mails.

"This type of lawful access is also required by the government of India for other consumer services provided by RIM's competitors in India," he said.

According to the company, the story confuses the capabilities of the data analysis tool and goes on to imply that RIM is somehow enabling access to data transmitted through BES.

"This is both false and technologically infeasible," the spokesman said. He also denied that RIM was facing a January 31 deadline.

Strong encryption for legitimate corporate and government use is widely deployed in India, he said. It is also offered by other smartphone providers and related technology suppliers.

"In addition, the government of India has in fact accepted and acknowledged that any concerns about the use of strong encryption for corporate and government data is not a matter specific to BlackBerry and that lawful access to such encrypted data is actually an industry matter," the spokesman said.

RIM has faced increasing pressure from India, Saudi Arabia and the UAE to provide access to communication over Blackberry devices, amid purported fears they could be used by terrorists.

This story was first published by Computer Weekly

What’s hot on Infosecurity Magazine?