BlackBerry 10 suffers security approval setback by UK gov't

BlackBerry 10 suffers security approval setback by UK gov't

Summary: UPDATED: Despite a strong hold of the worldwide public sector market, the UK government doesn't believe the latest BlackBerry 10 software is safe enough for secure communications. For now, the only modern day smartphone capable of government use in the UK is the iPhone.

SHARE:

Updated at 11:20 a.m. ET: see below.

bb-10-iphone
BlackBerry 10 software fails to meet the UK government's strict security requirements for confidential data sharing, while Apple's iPhone and iPad have. (Credit: Josh Miller/CNET)

The UK government may have deemed BlackBerry 10 not as secure as previous iterations of the smartphone platform. 

It comes at a time when the Canadian smartphone maker is attempting to claw back vital market share in order to compete with rival smartphone makers, while at the same time aggressively targeting the enterprise and government market with its BlackBerry branding.

First reported by The Guardian, the UK government's electronics clearance unit the Communications-Electronics Security Group (CESG) — a division of the third domestic eavesdropping agency, the Government Communications Headquarters (GCHQ) — said the software is incapable of meeting the strict security requirements for UK government work.

The Guardian reports that the CESG determined that BlackBerry Balance, the software that is designed to separate work and personal lives on the device, failed to pass the security requirements set out by the spy agency's sister group. The software is designed to prevent the sharing of data between work accounts and personal accounts, but at this time it's not clear what exactly failed the strict tests carried out by the UK government department.

BlackBerry (formerly Research in Motion) confirmed that its BlackBerry 10 software — and therefore the BlackBerry Z10 touch-only device — is not yet deemed fit for UK government use for low-level secure communications between staff and other Whitehall departments.

However, BlackBerry 7.0 and 7.1 retain their clearance statuses for dealing with sensitive government material, deemed "restricted" or below, two levels below "secret."

As it stands, the only viable modern day contender to take on BlackBerry 7 versions is the iPhone and iPad, which received CESG clearance for "restricted" content late last year. Some previously published guidance on Windows Phone and Symbian platforms exist, but both have been let go by Microsoft and Nokia respectively in favor of newer platforms.

There is a twist to the tale, however: the US government granted BlackBerry 10 the highly sought after FIPS 140-2 certification for secure public sector communication — showing that the UK and US, in spite of their special diplomatic and political relationship, do not see eye to eye on data security.

Exactly how this will affect other European nations remains unclear. In spite of intelligence sharing agreements between various EU countries — such as the UK with Germany and France — it could leave other EU nation states questioning their own purchases.

Germany, for instance, recently bought 5,000 BlackBerry Z10 devicesfor civil servant and staff use. Though the devices will be fitted with Secusmart micro-SD card technology to bolster the device and the platform as a whole, because BlackBerry Balance is an inherent feature in BlackBerry Enterprise Service-enabled devices, it may not negate the potential security threat noted by the UK government agency. 

The knock-on effect could be catastrophic for BlackBerry, which generates tens of millions in revenue in long-term enterprise and government contracts. One of the biggest clients in the UK is Whitehall and Westminster, home of the UK government.

BlackBerry did not give a timeline in which the software may be put through its paces again by the UK spin-off spy agency in order to see its BlackBerry 10 devices hit the public sector.

Update: A spokesperson for CESG told ZDNet in an emailed statement

Discussions with BlackBerry are ongoing about the use of the BlackBerry 10 platform in government. We have not yet performed an evaluation of the security of that platform, but we expect to be issuing Platform Guidance in the summer. This will cover a number of platforms including Blackberry 10 (and the use of 'Balance').

We have a long standing security partnership with BlackBerry and this gives us confidence that the BlackBerry 10 platform is likely to represent a viable solution for UK Government."

A statement from BlackBerry said:

Media reports alleging that BlackBerry 10 has been 'rejected' for U.K. government use are both false and misleading. BlackBerry has a long-established relationship with CESG and we remain the only mobile solution approved for use at 'Restricted' when configured in accordance with CESG guidelines.

This level of approval only comes following a process which is rigorous and absolutely necessary given the highly confidential nature of the communications being transmitted. The current re-structuring of this approval process, due to the Government Protective Marking Scheme review and the new CESG Commercial Product Assurance scheme has an impact on the timeline for BlackBerry 10 to receive a similar level of approval.

Topics: BlackBerry, Government UK, United Kingdom

Kick off your day with ZDNet's daily email newsletter. It's the freshest tech news and opinion, served hot. Get it.

Talkback

6 comments
Log in or register to join the discussion
  • convenient

    This news appears just before U.S. Launch
    gordongr
  • Your article is misleading and your facts incorrect...better correct it!

    You better get your facts straight before you ah ehm...."publish" your blogs...Zach.

    BlackBerry Says Reports Suggesting UK Government Security Rejection Are 'False and Misleading'

    http://www.ibtimes.co.uk/articles/448243/20130320/blackberry-10-uk-government-security-rejection-reports.htm
    HollyBolly
  • Yellow journalism at it's best.

    While it would be nice if bloggers actually researched the articles they spewed about, I doubt this will ever happen. Yellow journalism is all about sensationalism and the twisting and/or the complete omission of the facts behind a story, which makes it the ideal type of journalism for bloggers to aspire to - it is also great when there is an agenda to be served. While many bloggers like to give the pretence of being a genuine journalist, it is a rarity that is seldom found on the internet. It's all about "hits, click and FUD" these days.

    It would be exceedingly nice if ZDNet gave its readers the ability to block articles posted by it's more offensive bloggers, but I think they get more hits and clicks when their readers are offended. If it's actual news you want, then blogs are the worst place to find it.
    xenrobia
  • when

    It comes to negative news about BB quite a few bloggers sprint to the computor to repeat it. At least he did update it, probably had to.
    gordongr
  • Time to retract

    Zack,

    The Guardian has retracted the story and is being taken to task for another story re the supposed lowering of prices by UK sellers of the phones. The articles have both been misleading and not worthy of even the worst form of journalism.

    Time to do the same.
    manny.b
  • Copy and paste does not make you a reporter

    Especially when you copy and paste erroneous reports. Seriously, the internet is giving so many talent-less 'journalists' a voice they have not earned. Lazy, smart-ass, fanboys.
    Daniel Kinem