You are here
China's mass surveillance more sophisticated than thought
A MOBILE app used by police to track citizens in China's far west region of Xinjiang shows how some of the country's biggest technology companies are linked to a mass surveillance system that is more sophisticated than previously known, according to a report from Human Rights Watch.
The app uses facial recognition technology from a firm backed by Alibaba Group Holding to match faces with photo identification and cross-check pictures on different documents, the New York-based group said on Thursday. The app also takes a host of other data points - from electricity and smartphone use to personal relationships to political and religious affiliations - to flag suspicious behaviour, the report said.
The watchdog's report sheds new light on the vast scope of activity China is monitoring as it cracks down on its minority Muslim Uighur population in a bid to stop terrorism before it happens. The US State Department says as many as two million Uighurs are being held in camps in Xinjiang, a number disputed by Chinese authorities even though they haven't disclosed a figure.
In an address on Tuesday, US Secretary of State Michael Pompeo urged corporate America to think twice before doing business in Xinjiang.
Human Rights Watch said that so-called data doors at checkpoints may be vacuuming up information from mobile phones from unsuspecting citizens. Some Xinjiang residents who suspected their phones were being used as monitoring devices even buried them in the desert, a move that could later hurt them if the system loses track of their phone, according to Maya Wang, a China researcher for Human Rights Watch.
China's State Council Information Office did not reply to a request for comment sent by fax. The government has said the surveillance measures in Xinjiang are necessary to prevent terrorism and grow the region's economy.
Human Rights Watch said information in the report is based on reverse-engineering the police app, which communicates with a database known as Integrated Joint Operations Platform, or IJOP. The group said it enlisted Berlin-based cybersecurity firm Cure53 to conduct a technical assessment of the app after finding that it was publicly available online last year.
IJOP is mainly a tool for data collection, filing reports and prompting "investigative missions" by police. The report called for China to shut down the database behind the app, and for foreign governments to impose targeted sanctions such as visa bans and asset freezes against leaders in Xinjiang.
Human Rights Watch said the mobile app was developed by a unit of state-owned China Electronics Technology Group Corp, a Fortune 500 company known as CETC with US$30 billion in revenue and 169,000 employees. The group has expanded its various operations abroad, from developing smart city solutions in Teheran to a cooperation agreement with German engineering group Siemens. CETC did not respond to calls and e-mail requesting comment.
The app uses facial recognition technology developed by Beijing-based Megvii under the brand Face++. The company, which sells licences to use Face++ facial recognition in mobile apps, was considering an initial public offering to raise as much as US$1 billion in Hong Kong, Bloomberg News reported in January.
Megvii said it doesn't have any relationship with the IJOP database nor knowledge of why its technology appeared in the police app. It said it has a contractual relationship with CETC for a Face++ licence related to the use of e-government services such as paying bills or unlocking a mobile device.
"Megvii does not host any third party data nor does it have any access to the IJOP platform or the national ID database," the company said in an e-mailed reply to questions, adding that Human Rights Watch didn't provide access to the full report before it was published.
Megvii's investors include Alibaba Group Holding - co-founded by China's richest man, Jack Ma - and its affiliate Ant Financial Services, as well as Sinovation Ventures and Foxconn Technology Group. Alibaba and Ant declined to comment, while neither Sinovation or Foxconn responded to requests for comment.
Beyond collecting data and tipping off the police, the IJOP-linked app has a range of other functions. It provides a system for officials to communicate across voice, e-mail and telephone calls, uses Baidu map functionality for geolocation, and allows officials to search for information about people using their name and various other inputs. Baidu declined to comment. BLOOMBERG