Quectel response to FCC about IoT module security
Quectel Wireless Solutions, a global IoT solutions provider, today commented on the recent letter and response being published by the FCC and the Select Committee of the US Congress questioning if Quectel’s IoT modules represent a potential security risk.
“We welcome the opportunity to work with the FCC and other U.S. government entities to demonstrate our compliance and best practice device security approach, says Norbert Muhrer, President and CSO, Quectel Wireless Solutions. “We are committed to contributing to the advancement of a smarter world by delivering best-in-class and secure products. This commitment is evidenced by our extensive device OEM customer base and our constant focus on providing our customers with the best and most secure modules in the industry.”
The Select Committee to the US Congress’ letter to the FCC had several misconceptions about how Quectel modules work. Quectel’s clarification regarding the statements made in the letter is as follows.
Committee letter: “Connectivity modules are typically controlled remotely and are the necessary link between the device and the internet.”
Quectel’s U.S. customers or their customers’ third-party suppliers/service providers handle device and data management exclusively. Firmware updates are managed and controlled by the device original equipment manufacturer (OEM), not Quectel.
Committee letter: “Serving as the link between the device and the internet, these modules have the capacity both to brick the device and to access the data flowing from the device to the web server that runs each device”
The control of Quectel modules resides with the microcontroller unit (MCU) or central processing unit (CPU) embedded within the customer's device. Quectel itself does not possess any control; instead, this authority rests solely with the OEM – the entity responsible for developing the device. Remote management of the device is achievable solely through the OEM's device management platform. A notable instance of this, referred to in the letter, is the widely covered case involving John Deere agricultural equipment, where just the OEM typically can disable the equipment by accessing and shutting down its own MCU’s controlling the machine.
Committee letter: “As a result, if the CCP can control the module, it may be able to effectively exfiltrate data or shut down the IoT device.”
Once Quectel modules leave the factory and are delivered to its customers, Quectel customers own the data, and Quectel has no access to any of the data collected. The ownership, control, storage, and modification of the data generated by IoT devices within the market firmly rest with the OEM device makers and its customers. Even in the rare cases outside of the U.S. where Quectel resells the connectivity service of a wireless carrier, Quectel does not have access to the device data.
Committee letter: “This raises particularly grave concerns in the context of critical infrastructure and any type of sensitive data.”
Applications that require high security, such as critical infrastructure, typically use private access point names (APNs) and other methods which strictly control and monitor network access. This can be used to control and monitor any data flowing to and from the device. Critical infrastructure is meticulously fashioned with a multi-tiered security approach defined and implemented solely by the device OEM, not Quectel.
The cellular industry is heavily regulated and requires intensive testing and accreditation. Carrier and regulatory certifications are executed by trusted third-party labs and carrier labs, assuring that the module complies with strict technical requirements. The Quectel modules have obtained certifications from the FCC, PCS Type Certification Review Board (PTCRB) and major carriers throughout the world, which underlines Quectel’s commitment to meeting rigorous industry standards.
In addition to cellular modules, Quectel also provides Wi-Fi, Bluetooth and GNSS modules and antennas. As a GSMA member, Quectel and its carrier partners comply with all cellular industry regulations and applicable standards to ensure that end customer data is securely transmitted between customer device and mobile network operator. Quectel does not have access to ANY of the device data.
Quectel is committed to delivering high-quality, best-in-class, secure modules and go above and beyond industry standard practices by conducting independent third-party cyber security audits. More recently Quectel also retained the security firm Finite State, which is auditing and penetration testing the security of its modules through rigorous security testing, improved software supply chain visibility, and comprehensive software risk management. Quectel is also participating in the formulation of new industry security certification standards, such as the CTIA Cybersecurity Certification Working Group and pursuing additional cyber security certifications from various U.S. entities as new standards are formulated and adopted.
Qualcomm manufactures the chipsets and software platforms that are at the core of the Quectel modules. “Our Qualcomm partnership underlines the importance we place on working with well-trusted and secure partners from across the ecosystem to deliver high-quality solutions globally,” Mr. Muhrer continues. “Quectel's impact on the global IoT industry is profound. We supplied millions of cellular modules to support the distribution of Covid-19 vaccines for leading U.S. and global organizations including Pfizer, Johnson & Johnson, and other leading suppliers of vaccines. This underscores our commitment to playing a pivotal role in critical global initiatives.”
Quectel’s passion for a smarter world drives us to accelerate IoT innovation. A highly customer-centric organization, we are a global IoT solutions provider backed by outstanding support and services. Our growing global team of 5,900 professionals sets the pace for innovation in cellular, GNSS, Wi-Fi and Bluetooth modules as well as antennas and services.
With regional offices and support across the globe, our international leadership is devoted to advancing IoT and helping build a smarter world.
To view this piece of content from cts.businesswire.com, please give your consent at the top of this page.
Media contact: email@example.com
About Business Wire
For more than 50 years, Business Wire has been the global leader in press release distribution and regulatory disclosure.
Subscribe to releases from Business Wire
Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.
Latest releases from Business Wire
SLB Announces Third-Quarter 2023 Results Conference Call22.9.2023 20:00:00 EEST | Press release
SLB (NYSE:SLB) will hold a conference call on October 20, 2023 to discuss the results for the third quarter ending September 30, 2023. The conference call is scheduled to begin at 9:30 am US Eastern time and a press release regarding the results will be issued at 7:00 am US Eastern time. To access the conference call, listeners should contact the Conference Call Operator at +1 (844) 721-7241 within North America or +1 (409) 207-6955 outside of North America approximately 10 minutes prior to the start of the call and the access code is 8858313. A webcast of the conference call will be broadcast simultaneously at www.slb.com/irwebcast on a listen-only basis. Listeners should log in 15 minutes prior to the start of the call to test their browsers and register for the webcast. Following the end of the conference call, a replay will be available at www.slb.com/irwebcast until November 20, 2023, and can be accessed by dialing +1 (866) 207-1041 within North America or +1 (402) 970-0847 outsid
Energy Dome's CO2 Battery™ to Revolutionize U.S. Energy Landscape With First Installation Slated for 202622.9.2023 18:45:00 EEST | Press release
A groundbreaking development in sustainable energy storage is on the horizon for Columbia County, Wisconsin, U.S., spearheaded by Alliant Energy in collaboration with Energy Dome and other key stakeholders. Alliant Energy has just announced its selection to receive a federal grant of up to approximately $30 million from the U.S. Department of Energy's Office of Clean Energy Demonstrations (OCED) for the pioneering Columbia Energy Storage Project, a proposed 200-megawatt hour energy storage system, based on Energy Dome’s signature technology: the CO2 Battery™. This visionary battery system, aptly named the “Columbia Energy Storage Project”, is poised to be a trailblazer in the United States, marking a pivotal stride towards a more sustainable, reliable, and cost-effective energy future. Claudio Spadacini, CEO of Energy Dome, declared: “I’m honored to be part of this remarkable journey alongside Alliant Energy. The Columbia Energy Storage Project marks the genesis of a new era, where the
Settlement Administrator Angeion Group Announces Proposed Settlement In U.S. Dollar LIBOR-Based Instrument Class Action22.9.2023 16:00:00 EEST | Press release
There are lawsuits impacting individuals and institutions that entered into over-the-counter financial derivative and non-derivative instruments directly with 17 banks and that received payments tied to U.S. Dollar LIBOR. A Settlement totaling $101 million has been reached with Coöperatieve Rabobank U.A. (“Rabobank”), Lloyds Banking Group plc, Lloyds Bank plc, HBOS plc, and Bank of Scotland plc (together, “Lloyds”), Royal Bank of Canada (“RBC”), and Portigon AG and Westdeutsche Immobilien Servicing AG (together “Portigon”). Earlier settlements totaling $680 million were reached with Barclays, Citibank, Deutsche Bank, HSBC, MUFG, Norinchukin, and SocGen bringing the total settlement amount to $781 million. The remaining Non-Settling Defendants include Bank of America, Credit Suisse, JPMorgan Chase, Royal Bank of Scotland, and UBS. What does the Settlement provide? The Settlement will create a Settlement Fund totaling $101 million that will be used to pay eligible Class Members who submi
Kenvue to Announce Third Quarter 2023 Results on October 26, 202322.9.2023 13:30:00 EEST | Press release
Kenvue Inc. (NYSE: KVUE) (“Kenvue”), the world’s largest pure-play consumer health company by revenue, will announce its financial results for the third quarter ending October 1, 2023, before market open on October 26, 2023. The company will host a conference call and webcast at 8:30 a.m. Eastern Time to discuss its third quarter results. The conference call can be accessed by dialing 877-407-8835 from the U.S. or 201-689-8779 from international locations. A live webcast of the conference call will be available at https://investors.kenvue.com. A replay will be available approximately two hours after the live event. About Kenvue Kenvue is the world’s largest pure-play consumer health company by revenue. Built on more than a century of heritage, our iconic brands, including Aveeno®, BAND-AID® Brand Adhesive Bandages, Johnson’s®, Listerine®, Neutrogena® and Tylenol®, are science-backed and recommended by healthcare professionals around the world. At Kenvue, we believe in the extraordinary
OS Achieves 800-Puff Milestone with FEELM Max Technology22.9.2023 12:34:00 EEST | Press release
A significant mark in the vaping industry was set when OS Vape, a pioneering disposable product series from OS, showcased its dynamic range at the InterTabac from September 14th to 16th in Germany. Recognized as a leading brand in Germany's shisha product market, OS boasts an extensive local network of channels. Drawing upon this rich resource base, OS's foray into the disposable e-cigarette domain promises consumers enhanced puff counts, cost-efficiency, and unparalleled vapor consistency. As revealed by Future Marketing Insights, Europe's disposable market witnessed a substantial surge, accounting for a 32.3% revenue share in 2022. This robust growth underscores the escalating consumer preference for hassle-free, smokeless alternatives that eliminate the need for recharges or refills. The evolution of the disposable sector brings heightened convenience and a broader array of choices for consumers. Capitalizing on this trend, OS, through its innovative product series and leveraging it
In our pressroom you can read all our latest releases, find our press contacts, images, documents and other relevant information about us.Visit our pressroom