DoT to set up security lab to test network gear

KOLKATA: The Department of Telecom (DoT) is likely to set up a state-of-the-art security lab to test network gear used by mobile phone companies as it failed to reach an agreement on the proposed funding model with Tech Mahindra and Wipro. The two were interested in setting up such a certification facility. 

Both the companies have recently told DoT that the proposed lab can be set up only after a workable funding model is thrashed out since testing tools to certify networks cost millions of dollars and involve multiple stakeholders. 

The Indian Institute of Science, Bangalore, which was originally tasked with the job, has suggested that "it may be appropriate to set up the test lab under DoT since the exercise entails multi-level interactions between the telecom department, network gearmakers, system vendors and mobile phone companies," according to government documents reviewed by ET. 

A senior DoT official said "the government will build national capacity on a holistic basis in key areas, including security standards, security testing, interception and manufacturing of critical gear," adding that it was "evolving an institutional framework to deal withtelecom security related issues by October 1." He said this was discussed during a recent review meeting on implementing the National Telecom Policy. 

The telecom department wishes to set up the lab swiftly since it has mandated telcos to use only telecom network equipment "deemed safe" by an authorized lab in India. The project is part of the government's objective to ensure India's telephone networks are free bugs and malicious software that may be used remotely for spying. 

A pilot lab established by IISc Bangalore will work closely with the proposed DoT test lab and will develop the security standards, procedures and tools for testing network equipment used bymobile phone companies in India. 

"The IISc has already evolved testing standards to certify VoIP switches and routers" used in mobile and wireless broadband networks, says an internal DoT note dated June 25, a copy of which was reviewed by ET. 

If the lab doesn't become operational on time, mobile phone companies may face problems in deploying imported telecom gear October since the test facility is proposed to serve as a clearing house forimported network equipment. 

Post-Mumbai terror strikes in 2008, India has initiated a slew of projects to counter rising security concerns, including the development of a Centralised Monitoring System that can trackcommunication traffic-wireless and fixed line, satellite, internet, e-mails and voice over internet protocol (VoIP) calls. 

In the immediate term, a 16-member team of senior officials DoT's security wing have been tasked to formulate norms pertaining to user device testing, telecom network security testing & certification and internet security, said another DoT official.