RIM says has not compromised BlackBerry security in India
(Reuters) - Research in Motion refuted on Wednesday a new round of Indian media reports, which claim that the BlackBerry maker has granted the Indian government the encryption keys to its secure corporate email and messaging services.
Context & Ripple Effects
This is at least the third time since late 2010 that RIM has had to knock down an Indian access story: it denied a deal over access in November 2010 (denied any deal with India), called a follow-up tapping report false that December, and saw the Department of Telecom reject its proposed email decoding solution outright in October 2010 (DoT rejected the decoding solution). A Digital Trends report in October 2011 that RIM was running a surveillance facility in India kept the question alive even without official confirmation.
The stakes are higher now than in 2010 because the company is weaker: market share has been ebbing through mid-2012, developers are drifting away, and RIM just chose to stay out of China explicitly on security grounds (eschewed China for security reasons) — making the integrity of its encryption the last asset it cannot afford to see discounted.
First-order effects
- RIM's public denial is aimed directly at its most valuable customer base — the government agencies worldwide that favor BlackBerry precisely for its security reputation — to stop the rumored key handover from becoming procurement folklore.
- Indian media reports, picked up by The Register, ZDNet, TechEye and India Real Time within a day, mean the rumor travels faster than RIM's rebuttal can contain it.
Second-order effects
- If agencies treat the unconfirmed key-transfer claim as credible, rival platforms gain a wedge in government accounts that BlackBerry has held largely uncontested, compounding the share erosion already underway through 2012.
- Recurring access demands from Delhi push RIM back toward technical compliance proposals like the decoding solution DoT already rejected — a choice between conceding access and losing market access.
Third-order effects
- The two-year cycle of leak-and-deny shows how state demands for lawful access to encrypted messaging become a standing reputational tax on secure-device vendors, independent of whether any concession actually occurs.
- If the pattern holds, security provenance stops being a marketing claim and becomes something enterprises demand vendors demonstrate against state pressure — a structural shift in how encrypted services are sold to governments.
The trend: National governments' demands for access to encrypted mobile services are turning vendor security assurances into a recurring, testable battleground between regulators and device makers.