Overview
Hikvision is a Chinese surveillance technology giant that is the world’s largest maker of surveillance cameras. It has close links to the Chinese state and has won contracts to supply cameras for China’s vast surveillance network, including in Xinjiang where the Uyghurs are persecuted.
Hikvision India is a joint venture between Hikvision and an Indian partner. It has a strong presence in India, where it is one of the leading providers of video surveillance products and solutions. It has also presented itself as a significant Make in India partner and has won or executed several contracts in India for various projects, such as Safe City, Smart Transportation, Smart Healthcare, Smart Banking, Smart Hospitality, Smart Tourism, Smart Education, and Smart Retail.
Hikvision Ownership
The Hik group is a wholly-owned subsidiary of China Electronics Technology Group. China Electronics Technology Group is a state owned enterprise (SOE) owned and supervised by the SASAC.
Hikvision originated from a PRC China government research institute. Hikvision was founded from the PRC government's "No. 52 Research Institute", one of dozens of research institutes that the PRC government has founded in various electronics / technology domains.
The PRC government remains the 'controlling shareholder' of Hikvision. By contrast, Hikvision's overseas marketing obscures their origin and downplays government ownership as just one of many 'shareholders' rather than the controlling one it is.
Not only does the PRC government have such control, Hikvision also touts strong support from the Chinese (PRC) government as well acknowledging their 'state-owned parent' (CETC / CETHIK):
Modus Operandi to by-pass restrictions and suspicion
Chinese companies are bidding for tenders issued by public sector undertakings (PSUs) in India by presenting themselves as entities registered in other countries or making partnership with local companies. For example Infinova and Prama Hikvision.
A Rs. 55 crore tender has been issued by the Karnataka state office of the Indian Oil Corporation Limited (IOCL)—a Government of India PSU—to Infinova, a company with Chinese connections. The tender has been given for the installation of CCTV surveillance cameras at IOCL’s operating locations, oil and lubricant storage units, aviation fuel station (AFS) and LPG plants. These cameras will be supplied by Infinova, a Pune-based company, but whose ultimate holding company is “Shenzhen Infinova Limited”, which is based in Shenzhen, China.
Prama Hikvision India network
It is an Indian subsidiary of Hikvision (Chinese ownership). Hikvision enjoys over 35 per cent market share in India. India is the only country where Hikvision has a production facility outside China. It has 51 branches and 21 RMA centers across India, offering pre-sales and post-sales service to its customers.
Hikvision Products in Indian security sensitive sectors
Hikvision CCTV camera can be seen in DRDO’s ground control station of TAPAS UAV
|
It was the Principal Partner for Indian Defence and Security Exposition 2019, organised by MoD and MHA.
Hikvision is believed to have supplied solutions to Delhi Metro Rail Corporation (DMRC). Moreover, it is also one of the vendors for Bharat Electronics (BEL) that works on highly sensitive and classified defense projects in India.
It provided CCTV’s and other equipment for Surveillance project in Deesa Nagar Palika in north Gujarat in 2018
Over the years it has installed over 1.4 lakh CCTV cameras in the national capital Delhi
Supplying 1500 cameras for the Mumbai Police’s Safe City project in 2015
Installing 5000 cameras for the Delhi Police’s Nirbhaya project in 2016
Providing 4000 cameras for the Lucknow Metro Rail Corporation in 2017
Deploying 12000 cameras for the Hyderabad City Surveillance project in 2018
Implementing 10000 cameras for the Surat Safe City project in 2019
Security threats posed by Hikvision:
The US government has banned Hikvision products from its supply chains, citing national security concerns. It claims that Hikvision partners with Chinese intelligence entities and uses resellers to disguise its products for sale to the US government, creating vectors for Beijing to compromise US networks. The Federal Communication Commission has also deemed Hikvision a national security threat.
Hikvision is facing severe scrutiny in Europe over its data integrity practices as several red flags has been raised by Europe nations over data security of citizens and transferring of sensitive data to the Chinese government.
The UK government has banned Hikvision cameras from “sensitive” sites, such as government buildings, military bases and nuclear facilities. It has also advised public bodies to review their use of Hikvision products and consider replacing them with more secure alternatives.
Australian government offices have begun removing more than 900 Chinese-made surveillance cameras, intercoms, electronic entry systems and video recorders. In Feb 2023, a government audit found the technology had been installed in more than 250 departments and agencies. Concerns over the cameras prompted dire warnings from the shadow cyber-security minister, James Paterson, who has previously called Chinese espionage and foreign interference the greatest threat to Australia’s way of life
Security researchers have found several vulnerabilities in Hikvision cameras that can allow hackers to remotely take control of devices without any user interaction. One of the most serious flaws affects more than 70 Hikvision camera and NVR models manufactured as far back as 2016. Cybercriminals have also exploited a security flaw in Hikvision cameras that allows them to inject commands and take control of the devices. They have been selling access to these cameras on the dark web for as little as $10.
A vulnerability was exposed by an anonymous user in Hikvision IP cameras that "permits an attacker to gain full control of the device,". The researcher said the cameras had "the highest level of critical vulnerability." Later the company accept the security loophole and instructed the cameras' users to install new software on affected devices.
Security experts have warned that Hikvision cameras could be used as a Trojan horse to hack into computer networks and cause civil disruption by interfering with critical infrastructure, such as power supplies, transport networks etc. The MIT Technology Review called Hikvision, which is headquartered in China’s eastern city of Hangzhou, “the world’s biggest surveillance company you’ve never heard of”.
Possible threats to India:
The use of Hikvision surveillance tools in India poses significant security threats to the country’s critical infrastructure, data privacy, human rights and national sovereignty.
Threat | Description | Impact |
Data Breach | Hikvision cameras could be hacked or compromised by malicious actors who could access or leak sensitive data stored or transmitted by the devices | Loss of confidentiality, integrity and availability of data; damage to reputation; legal liability; financial loss |
Network Intrusion | Hikvision cameras could be used as a Trojan horse to infiltrate or disrupt other devices or systems connected to the same network | Loss of functionality, performance and security of network; damage to infrastructure; operational disruption; financial loss |
Surveillance Abuse | Hikvision cameras could be used for unauthorized or unlawful surveillance of individuals or groups by inimical agents. | Violation of privacy, civil liberties and human rights; social engineering; identity theft; blackmail; harassment; discrimination |
Foreign Interference | Hikvision cameras could be used for espionage, sabotage or influence operations by the Chinese government | Compromise of national security, sovereignty and interests; geopolitical conflict; economic harm |
In 2021, the National Security Council Secretariat and the Defence Intelligence Agency raised security concerns about the possible threat of data loss through surveillance cameras, especially Chinese-origin and Hikvision cameras. Still Indian’s sector critical to national security are dependent on these Chinese equipment.
Conclusion
Hikvision is a Chinese surveillance technology giant that has a strong presence in India, where it is one of the leading providers of video surveillance products and solutions. However, the use of Hikvision surveillance tools in India poses significant security threats to the country’s critical infrastructure, data privacy, human rights and national sovereignty. The Indian government should take urgent measures to assess the risks and mitigate the impacts of these threats.
Comments