Dahua Concedes, Detailed Public National Security Compliance Plan Examined

Published Sep 14, 2023 15:55 PM

After months of defending a confidential plan, Dahua has conceded, making the plan public, including key details that could significantly impact its future business (or lack thereof) in the United States.

IPVM Image

In this report, we examine Dahua's 27-page compliance plan, its impact on Dahua's business and partners, and Dahua's prospects for convincing the FCC it can stop banned sales with this plan.

Executive ******* ** ******** *******

*****'* ******** ********:

  • ********** ** ***** *** ****, ** or ***** ***** ******** ***** ** used *** ***********.

  • ******* ****** *** ******* ** *******, boxes, *** ********.

  • ****** **** ******* “******** ******** ********” but *** ***** ***-****** ****.

  • **** ************* ** ************ ** ******** devices, ******** ***** *** *** ********* how **** ** *********** ********.

  • ********** ******* *** ************ *********.

  • ******** ******, *** ***** **** *** specify *** **** **** **** ***-**********.

  • ******* ****** *** ******** ******** *********** for **********.

  • ********** ****** *** ***-***** ********* *** guidelines, *** ***** *** *** ********* how ** **** *******.

  • ********** ******** *** ***** *********.

  • ** *** ********** ************** ********.

  • ******** ** ******** **** ******** ************ plan ** ***** ****. ***** *** not ******** *** ***** **** ****.

** ********* ** **** ****** *** report.

FCC ********** ***** **********

***** *** ** ******* ************** ********** (FCC)*** *********** ****** *** ********* ** sale** ***** ********* **** *** *** yet ******** *** *************, ** ******* future ************** ** ********* *** ******** the ***, ***** ********** *****, **** products **** *** ** **** *** banned ********.

***** ****** ******** ******* "****** ******, security ** ********** **********, ******** ************ of ******** **************, ** ***** ******** security ********." **** ****** * ***** range ** ***-***** ** ***** ***** of **********, **** ** ***** ******/****/***, as **** ** **** ******* ***-*****, such ** *** **********.

Confidential ***** *********

***** ********* *** ********** **** ** April ****, ************* ** **** ** ******, ****** "****** *********, ********** ***********" that *** *********** ***** *******. ********* filed * **** ** ******,**** **************.

********* ******* **** *** *********** ***************, ******* ***** ** *********** public ******** ** *** ********** *****, and **** **** ****** ** ********* for ****** ********** *** ******* **** other *********** ** *** ***.

Dahua ******** ******* *** ************ *********, ***** **** ******

IPVM Image

***, ****** * ****** *****, ***** withdrew *** ******* *** ************ ********* on ********* *, ****, *** ********* ******** **-**** ********** ****, ***** ******** * **** ** measures ** ******* ****** *****. ***** explained **** **** *** ** ***** delay *** **** *****:

***** *** ***** **** *** ********** submission **** ******* ***** **** *** Commission *** ****** *** ****** ****** of *** **** ** ******* ******* further *****.

***** *** ***** *** ********** **** over **** ****** *** ***, ** the ****** ********, ***** **** ** reduce *********** *** *** ******** *** customers ********* **** *** ******* ****** of *** ****, ****** **** ***** additional **** ** ********* **** ***************.

*** ******** ** *** ********* ** Dahua's ********** **** ********* ** *****. Dahua **** "** ******** ***** ********* to *** **** ********** *********," ******* further ***********. ******* *********** ***** ******* of *****'* ************ *** **********, ***** it ********* ** ***** **** *** FCC ** * ***** "********** ******," or ******* ** *****'* *** *******.

Broad **** ********* *** ** ***** *** *** ********

*** ********** ****'* ********* *** *****-******** for *********, ********, *** ****** **** does ******** **** ***** ***.

*** **** ******* ** *** ***** USA *********, ********* *** *** ******* to *** ********* *****, **************, *********, contractors, *** ***** ******** ********* ******** on ****** ** ***** *** (************ “Dahua *** *********”).

*******, *** ******** **** ********* ***** USA, ******* **** *** **** ** Dahua ** ** ***** ***** ************ acting ** ***********.

Dahua ******** ** *******, *****, *******, *** ********

***** ******** ******* ****** *** ********** across *********, *********, ***-**** *************, *** software. ***** **** ** **** ***** labels ******, ** **** ** ****** partners **** ******.

***** ** ******* *** ****** ***** the "****** *********" ****. ** ******** a ********* ******* **** *** ******, "DO *** *** ********* *** ******** Security ********."

IPVM Image

*** ********* ******** * ******* ******* stating "********** *** *** ** ******* PROPERTY ****. *** *** ******** ******** PURPOSES **********."

IPVM Image

***** **** ******** ******* ** *** "video ************ *********" ******** ** ***** but **** *** ******* ** **** includes ***** *********. ** *** ****,***** ****** ** *** ******* ********* *** *** "***** ************ equipment."

** *********** *******, **** ******, *********, and "****** *****," ***** **** ******* a **** ******** ********:

IPVM Image

**** ******** ************ **** * **** variety ** ****** ******** ** *** levels ** ********** **** ***** "****** safety":

*** **** “****** ******” ***** ******** provided **Federal, ***** ** ***** government entities, or provided by non-governmental ******** (**** ** ************ ******** ********) authorized by a governmental entity if their primary mission is the provision of services, that protect the safety of life, health, and property, including but not limited to police, ***** *** ***********, ****, *** ********* ******* ********. [emphasis added]

*****'* *********** **** ** *** **** on ******** ** ***** ****** ********** is * *********** ************* **** ***** partners **** *** ** ********* ** do **.

***** **** **** ***** ******** ** its ********. **** ********* ** *********, Dahua **** ******* * ********* ********* user "*************** *** **********" ****** ** becomes ********, ***** ********:

** ********** **** ******, *** ***** that *** ********* **** *** ** used *** ******** ******** ******** (*** package ****** *** ********** ** **** term).

Push ************ ** ******** *******

** *** **** ***** ****** *** compliance ****, ** **** **** "*********** push * ************ ** ******* ***** equipment, ********* *** ***-**** **** ***** equipment ****** ** **** *** ******** Security ********." **** ******* **** **** appear ***** ******** *******.

IPVM Image

***** (*** *********) **** **** ******** that **** ** *** **** ****** access ** ***** *** ********* *** Dahua **** *** ******* *** **** would *********** ********** ****. ** *** extent **** ***** ********* ** ********* to *****'* ***** ** *** ******** this ***** ** ********, ****** **** of ***** ********* ** *** ** connected.

"National ******** ********" ******** ** ******

*****'* ******* ******** ** ********** ** warning **** ******* "******** ******** ********" since ***-****** ******** **** ******* ****** safety, ********** **********, *** ******** **************. Only *** ****-**** ******** ******** **** disclosure.

***** ***** ** ***** ** ******* the ******* ***** *****, *** *** may **** ***** **** *****'* ********. "National ******** ********" *** *** ***** likely ** *** **** **** ***-***** will *********, *** ** *** ***** inclusion ** *** ***** **********. *** instance, ** *** ******** ***** *** view *** ************ ** ******* ** national ********, *** **** **** ** as ******* ** ******** **************.

* **** *********** ******* ***** ** "Use *** ****** ****** ******** **********," since ****** ****** *** *********** ******* critical **************, ********** *********, *** ******** security.

***** *** *******, ***** ****:

*** ******** *** *** ****** *** crafted ** ** ******* *** ************* to ******* ********** **** *** ***’* requirements *** ************.

Dahua ******* ******** ********** *** ****** **************

***** ***** ** *** ******** ********** for *** ******** ********* **** ********* they **** *** ******* *** ************:

*** ***** ********** ********* *** *** sale ** ***** ********* ** *** purchaser ** *** ********* ** *** United ****** **** ******* *** ********* to ********* **** ****:

“**** *** ******, ****, ** ***** for **** *** ***** ***** ************ and ****************** ********* ** *** ********* agency ** *** ****** ****** ******* government."

"**** *** ******, ****, ** ***** for **** ***** ***** ************ *** telecommunications ********* ** *** ****** *** purposes ** ****** ******, ******** ** Government **********, ******** ******** ************ ** Critical **************, *** ***** ******** ******** purposes."

***** **** *** * ******* ********* to *** ****** ****** **** ***** products "**** *** ** ****" *** these ****** ********.

************, ***** **** ******* ******* *** installers "** ******* ** ** ****** basis **** **** *** ********* **** restrictions...under ******* ** *******."

** *******, ******* ** * ******** penalty *** ***** ********** **** ** a ***** ****** **** ******* ******* entities, ** ** ** ******* ** this ****** ******* ****. **** ***** Dahua *** *************, *** **** *********, "Regarding *** ********* ***** ************** ** compliance, ** ********* ********** ******* ******* with ***** *******."

***** **** ** **** **** "*********** action" ******* *********, "** ** ** including *** *********** ** *** ******** agreement ** ************ **** ***** ***."

Dahua ********** *******

***** **** ********* * "********** *******" consisting ** * ****-**** ****** *** email.

***** *** **** ******** * ********** Hotline *** * ********** ******* *-**** address. *** ********** ******* ****-**** ********* number **: (***) ***-****. *** ********** Hotline *-**** ******* **:**********.*******@*********.***.

********* **** ** **** ** ****** compliance ******** "*********** *** **************" ******* these ********.

Partner *** ******** ******

* "********** *********" ******** ** "*************** of *** ***** *** *********** ***** functions *** ******** ** **** ****" will ******* ******** ******, ** **** as ***** ********.

***** **** **** ** ***** ***** per ****, ** **** ******** "****** 10% ** *** ***** ******* *** the ********* ***** *** ****** ***** entries." ***** **** *** ******* *** it **** ******** ************* **** **** review.

***** **** **** ****** "* ****** sample ** ***** *** ********" *** review ***** "***** *******, ********* *********, and ******* *********." ***** **** *** result ** *********** *************, ************, ***** has ****** ** *** *** ** does *** **** *** **** *** products.

Voiding ******** *** *********

***** **** ** **** **** ********** of ***-***** *** ******* *** ****'* guidelines. ***-***** **** **** ***** ***** to ********** ** **** *** ***** equipment *** ********** ******** ** ** they ****** ** ***** ******. ***** did *** *** ** ** **** ask ***-***** **** ******** *** ***** used *** ****** ******** ******, ** it ** ******* *** **** **** be ********.

Dahua ********* ********

***** ***** ** ******* *** ********* on ********** **** *** *****.

*** ********** ********* ***** ***** *** Employees ***** ****** *** **************** ****** to *** ****** *** ***** ** the ********** ********** **** **** ****.

**** ******** ******** ******** *** ******* and *** ********* *** "********* [** the *****] ** ************, ********, ******* discussions, *** *** **** ***********."

Compliance *** *** ******** **********

*******, *****'* ********** **** ** *****, but ** ***** ** ******* ******** for *** ********. *** *** *** expressed ******** ******* **** **** *** is ****** ** ******* **** *********** from ***** ****** ********* *** ****.

********* ********, ***** ****** **** **** "similar ******** *** ********* ************" **** apply ** *****-******* ******** ******* ********** differences ** ************:

***** ***’* ***-******* ** *****-******* ******** (i.e., ******** ********* **** ***** ***** names) ******** ** *** *.*. ****** through ***** ***’* *** ******** ********will ****** ******* ********* *** ********* ************ set forth in this section. [emphasis added]

********, ***** **** ** **** **** a **** ************ ** ******* ******* of *** ***** **** ******** *** compliance ****, *** **** "** ******* Dahua *********."

***** **** *** ******** ** ******* the ******** ************, ***** *** ** trying ** ******* *****-******** ** ********** the ****** ** *** ********** ****. However, *** *****-******** ********* ** ******* to *** *****, ************ ** ********, and *** *** *** **** *****'* approach **** **** ** ** ************.

Focus ** ***** *** ****** ************* ****

***** ****, "*** **** ******* ** all ***** *** *********" *** "***** entities ********* ******** ** ****** ** Dahua ***," *** **** *** ******* possible ************* ** ***** ********* ** affiliated ******** ** ***** *********.

********** ** ****** ******** ** *** US, *** *** ********. ***** ****** of *****-******* ***** ********* *** ** placed *** ***** ******** ** ***** instead ** ***** ***. ***** ********* in ***** *** *** ******** ** the ********** ****, *** ***** ******** may ********** ********** ******** **** ***.

***** **** ****** **** *** ********* is ****** *** ** ********** ********* overseas, **** ** ********* ** ******** bases. *** ***** ** *** ****** dealers *** ********** ******** ***** ** compliance ************, *** ** ** ******** Dahua ********* ********. (***** ********* ******* relabeled ********* **** ** ****** *** embassies**** **** ** ***** ** *** past.)

*******

***** *** *** *** ******* *********** challenges *** *****'* ** ********, *****'* compliance ********* ** ***** *** *** create ********** ** ***** ***, ************ for ********. ** ** ****** ********* for ************* ** ****** ********** ******* and ******** ** ***** *********' ***** and *********. ******* ******** *** **** away **** ***** *** ** ********** over *** ************.

*******, *****'* **** ** ***** *** provides * *****-******* ********* *** **********. However, *** *** ** ****** ** have ********* ************ *** ********, *** Dahua *** **** ** ******* ******* of *** ****. ***** ***** ** required ** ******* **** *********** *** it **** ******* ********** *** *** sellers. ************, **** ** *** **** relies ** ***** *** ***********, *** the *** *** ******* ****** *********** or ******* **** *****'* **********.

Comments (3)
U
Undisclosed #1
Sep 14, 2023

**** ** *** ********** ** ******* a ****** ******* ** * ****** of **********

(2)
UM
Undisclosed Manufacturer #2
Sep 15, 2023

*** ******** ****** **** ******* ***** box ** ********** *** * ******* label *** *** **** ******** ****** that *** ** * ******* ******* in *******.

(1)
(1)
UI
Undisclosed Integrator #3
Sep 15, 2023

**** ** *** ******** **** *** on ******* ******** ** ******.

(1)
(1)