Images de page
PDF
ePub

sonal, societal, and economic harm brought about by increased drug use: that is, the numerous deaths, ravaged lives, increased health care costs, and the tremendous economic harm calculated in the billions of dollars. A substantial increase in undetected and unprosecuted violent crime (bombings, murders, and other violent acts) along with the loss of hundreds of lives and millions of dollars in economic harm. Question 17. It has been represented to the Committee that FBI field Agents have experienced difficulty when working with telecommunications service providers in implementing court ordered wiretaps. However, following a FOIA request filed by the Computer Professionals for Social Responsibility (CPSR), no such difficulty was indicated. Realistically, is there in fact a problem in this regard so as to warrant the proposal of this legislation by the Administration?

Answer. Pursuant to a recent FOIA request by the Computer Professionals for Social Responsibility (CPSR), the FBI released information indicating that, during a specific time frame, a few FBI offices were not experiencing wiretap intercept problems caused by advanced technologies. CPRS has publicly stated that this information indicates there is NO present technological impediments to wiretaps. This assertion is false and misleading. The FBI did not release "positive information" which indicated specific problems. This "positive information" was not released because it either identified ongoing investigations or specifically identified vulnerabilities in electronic surveillance associated with Criminal or National Security Investigations. During a 1993 informal survey targeting technical problems encountered by law enforcement in conducting court-ordered wiretaps, 91 instances were identified as incidents in which law enforcement was precluded, either partially or fully, from implementing the court order. In fact, in 1992, one state law enforcement agency advised the FBI that approximately 25 percent of its electronic surveillances were impeded by advanced telecommunications technology.

Question 18. The Committee believes that the legislation proposed by the administration will restrict the future development of digital telecommunications and possibly diminish economic competitiveness in terms of the world market. Please comment.

Answer. The legislation proposed will not restrict the future development of digital telephony. As a practical matter, it will have no impact on technological development at all. The purpose of the Administration's legislation is to preserve law enforcement access to court-authorized electronic surveillance and in no way affects future advances in technology.

Regarding economic competitiveness, other Governments throughout the world look to the United States as the world leader in telecommunications technology and development. Equally important, foreign governments also are interested in the ability of both government and law enforcement to gain lawful access to developing telecommunication systems for law enforcement purposes. In conferences held with other countries on this issue, these nations indicate they are following this issue in the United States with great interest as they seek to remedy this problem in their country.

Question 19. Can you describe how the current proposal will reduce the privacy of individuals?

Answer. The privacy of individuals will not be reduced. Digital telephony will enhance privacy by making it more difficult for any possible unauthorized wiretaps to occur. The standard for judicial authorization will not be changed. Law enforcement expects that there will be virtually no change in the numbers of intercepts performed annually.

Senator LEAHY. Chairman Edwards has just stepped out for a vote, as have our other colleagues from the House, but we will continue on with the hearing. I suspect the two of us will also have to vote from time to time.

Ms. Hazel Edwards is the Director of Information Resources Management and General Government from the General Accounting Office. Ms. Edwards, your testimony is very interesting in the questions it raises. Please go ahead, ma'am.

STATEMENT OF HAZEL EDWARDS, DIRECTOR, INFORMATION RESOURCES MANAGEMENT/GENERAL GOVERNMENT, GENERAL ACCOUNTING OFFICE

Ms. EDWARDS. Thank you. Chairman Leahy, members of the committees, it is my pleasure to be here to discuss the proposed

legislation. My comments will address three aspects of wiretapping, specifically the challenges facing law enforcement agencies. The second area of focus will be on the status of efforts to resolve those challenges. The third area of focus will be on cost.

In July 1992, we reported to Congress that law enforcement's ability to execute court-approved wiretaps was challenged by advanced telecommunications technologies. To update our understanding of the changes that have occurred over the intervening years, we discussed the full range of these technologies and special features with industry and with law enforcement communities. We found that although some technical solutions have been developed to enable wiretaps, further advances in the technologies have made the overall task of intercepting calls more difficult.

As a practical matter, some law enforcement agencies reported that they have encountered problems in affecting wiretaps. In some cases, investigations were delayed or court orders were simply discarded because of these problems. Industry representatives confirm that there are current as well as imminent technologies that are difficult to wiretap.

As a result, Mr. Chairman, we believe that an important tool for law enforcement's investigations is slowly vanishing. Clearly, there is a need for action that will preserve law enforcement's ability to conduct court-approved wiretaps.

Regarding the status of efforts to resolve these challenges, we reported in 1992 that law enforcement agencies had not sufficiently defined the requirements for wiretaps. That is now changing. Law enforcement agencies have made progress in describing their needs in terms of both capability and capacity.

As of June of this year, the capability requirements are clearly stated. However, the technical solutions for delivering these capabilities have not yet been defined by the service providers and manufacturers. Capacity requirements are not yet defined. Capacity needs would include detail on, for example, the number of simultaneous wiretaps that would need to occur as well as the identification of specific locations where wiretap capability would be needed.

In June of this year, the requirements document acknowledged that both law enforcement agencies as well as industry must collectively determine the level of capacity needed to implement wiretaps.

Now to the issue of cost. The proposed legislation authorizes the Attorney General to reimburse telecommunications carriers for reasonable costs incurred in carrying out provisions of this bill. The bill also authorizes the appropriation of $500 million for this purpose during the years 1995 through 1998.

It is virtually impossible to precisely determine if $500 million is adequate to cover the reimbursement costs of the provisions discussed in this bill because cost will depend on the evolving capacity requirements as well as on the yet-to-be-determined technical solutions.

For example, if law enforcement requires capacity beyond what is available in current switch technology, then switch upgrades will be needed to attain desired capacity levels. The cost of these upgrades could vary considerably, depending on the number of

switches involved. In the case of land-line switches, there are more than 20,000 switches nationwide.

To further illustrate the difficulty of precisely estimating the cost associated with this bill, consider the following scenario. Industry cost estimates for land-line switch upgrades range from somewhere in the neighborhood of $15,000 to upwards of $100,000 per switch, depending, of course, on the extent of changes required in the hardware and software.

Assuming that law enforcement will require nationwide access to wiretapping capability for land-line services, then the cost of upgrading all 20,000 switches would range from the hundreds of millions of dollars into the billions of dollars.

I will conclude my remarks with three observations that could help control the cost of this initiative. The first is that as technical solutions are developed, law enforcement and industry should find effective ways to share the solutions and thereby avoid unnecessary

cost.

Second, law enforcement and industry should prioritize the development of solutions to address the most critical needs first and where possible control costs by coordinating switch upgrades to coincide with the upgrades already planned by the service provider. Finally, law enforcement agencies and industry should make wiretap requirements part of the industry's standards which guide the design and the development of new and emerging technologies. Incorporating these needs at the beginning of the product cycle should help lower the overall and ultimate cost of meeting law enforcement's needs.

Mr. Chairman, that concludes my remarks. I would be happy to respond to any questions from you or other members of the committees.

[The prepared statement of Ms. Edwards follows:]

PREPARED STATEMENT OF HAZEL E. EDWARDS, DIRECTOR, INFORMATION RESOURCES
MANAGEMENT/GENERAL GOVERNMENT ISSUES, ACCOUNTING AND INFORMATION
MANAGEMENT DIVISION

Mr. Chairman and Members of the Subcommittees: I am pleased to appear today to discuss S. 2375. My comments will focus on the wiretapping challenges facing law enforcement agencies, the status of law enforcement's technological requirements, and the potential costs of satisfying those requirements.

TRADITIONAL WIRETAPPING METHODS ARE CHALLENGED BY TECHNOLOGY

In July 1992, we reported to the Congress that law enforcement's ability to execute court-approved wiretaps was challenged by advanced telecommunications technologies.1 To determine the current status of digital telephony and to identify the changes that have occurred during the last 2 years, we interviewed representatives from law enforcement organizations, telephone service providers, and manufacturing companies. Between April and June of this year, we discussed various telecommunications technologies, such as analog and digital voice communications carried over copper wire and fiber optic telephone lines; land-line, cellular, and satellite switches; and Personal Communication Services, a technology that could be available in the near future. We also discussed special features, such as call forwarding, voice mail, and speed dialing. (A list of the organizations we met with is attached to this statement).

These discussions revealed that although some technological solutions have been developed to facilitate law enforcement agencies' wiretap efforts, other technology

1FBI: Advanced Communications Technologies Pose Wiretapping Challenges (GAO0/IMTEC92-68BR, July 17, 1992).

[ocr errors]

changes have made it more difficult for them to use traditional wiretap methods. While these agencies are still able to conduct most court-approved wiretaps, they have reported problems in effecting wiretaps. Further, they report that investigations were delayed or court orders simply were not pursued because of these problems. For example, the National Technical Investigators' Association, which represents over 3,000 federal, state, and local law enforcement officers engaged in technical investigative activities, reports that "it was almost two years after the introduction of Cellular Telephones before law enforcement had any means to intercept criminal activity conducted on cell phones."2 In addition, industry representatives told us that there are current and imminent technological situations that would be difficult to wiretap, even though they have not yet received wiretap court orders for those situations.

Clearly, there is a need for action that will preserve law enforcement agencies' ability to conduct court-approved wiretaps. Because the details of law enforcement agencies' problems and the specific technological challenges are classified, I cannot elaborate on them in this hearing. However, I would be glad to arrange a separate classified discussion on those topics at your request.

DEFINITION OF LAW ENFORCEMENT REQUIREMENTS HAS IMPROVED

In 1992 we reported that law enforcement agencies had not sufficiently defined their wiretap requirements. Since then, the Federal Bureau of Investigation, in cooperation with other law enforcement personnel, has issued two documents one in July 1992 and an update in June 1994-describing their capability and capacity requirements. These documents represent considerable effort by law enforcement agencies to delineate their needs.

The capability requirements, which include the timing and nature of information required from wiretaps, making the wiretap undiscernible to the subject of the wiretap, and the reliability and quality of service, are reasonably well defined. The capability requirements include key technical and operational conditions that are needed to conduct wiretaps, and they are often accompanied by helpful clarifications and examples.

On the other hand, the capacity requirement, or quantity and geographic location of simultaneous wiretaps, is not yet precisely defined. Specifically, the June 1994 requirement document states that law enforcement agencies and industry will need to work together to determine the additional capacity that is needed to implement all lawful requests for wiretaps.

COSTS HINGE ON EVOLVING LAW ENFORCEMENT REQUIREMENTS

S. 2375 specifies that the Attorney General, subject to the availability of appropriations, shall reimburse telecommunications carriers for reasonable costs incurred in carrying out the provisions of the bill, and details the nature of the costs that can be reimbursed. The bill authorizes the appropriation of a total of $500 million for fiscal years 1995 through 1998, and authorizes the appropriation of such sums as needed to carry out the bill for fiscal years 1999 and beyond. However, it is virtually impossible to precisely estimate the reimbursement costs discussed in this bill because costs will depend on evolving law enforcement requirements.

For example, even though the capability requirements are reasonably defined, much work remains for industry to identify technological alternatives that will satisfy those requirements across the various technologies. Further, industry must implement those alternatives, which will sometimes involve working with telephone equipment manufacturers. The costs associated with delivering these capabilities can vary widely depending on the technical approaches selected to satisfy the requirements.

More significantly, costs could be affected by how the capacity requirements are defined. S. 2375 suggests basing capacity requirements on characteristics of equipment or service in place, number of subscribers, geographic location, and other factors. If law enforcement requirements demand capacity beyond what is available in current switch technology, then some technology redesign or replacement will be needed to attain the desired capacity levels. Under S. 2375, costs incurred in attaining the desired capacity levels will be subject to reimbursement by the government. These costs will vary greatly depending on how many of the approximately 20,000 land-line switches will need to be replaced to meet the capacity requirements once they are defined.

2"Digital Telephony and Communications Privacy Act of 1994," National Technical Investigators' Association, April 1, 1994.

Although we cannot precisely estimate total costs associated with this bill, an example may illustrate the way costs could vary. Industry estimates for switch upgrades ranged from $15,000 to about $100,000 per switch, depending on the extent of changes required to the switch hardware and software. In addition, there could be costs to deliver capabilities in technologies other than land-line switches. As a result of this imprecision, the ultimate total cost of meeting this bill's requirements could range from hundreds of millions to billions of dollars.

LAW ENFORCEMENT AND INDUSTRY CAN TAKE STEPS TO CONTROL COSTS

In conducting our discussions, we observed that industry and law enforcement representatives had made considerable progress in communicating with one another since our July 1992 report. Each demonstrated a better understanding of the technologies involved and of each others' concerns. This progress has been facilitated by their voluntary participation on the Electronic Communications Service Provider Committee sponsored by the Alliance for Telecommunications Industry Solutions. We support continued cooperation of law enforcement and industry representatives through this organization, as well as through other means, to identify and resolve problems.

I would like to conclude my remarks with three observations that could help control costs. First, law enforcement and industry representatives should identify known solutions and communicate these to appropriate law enforcement and industry employees across the country. In our discussions with industry representatives, it was clear that some companies had solved problems using equipment that other companies thought was unavailable or were using methods that other companies had not considered. Working cooperatively, the government could avoid reimbursing industry for reinventing solutions that already exist.

Second, law enforcement and industry representatives should work together to identify ways to prioritize and sequence development and deployment efforts needed to satisfy this bill's requirements, to ensure that costs are contained and the most critical law enforcement capability and capacity issues are addressed first. For example, if a switch replacement that is needed to meet a capacity requirement can coincide with a switch replacement to meet a carrier's business needs, then costs could be lowered.

Finally, as provided for in S. 2375, law enforcement agencies need to work with industry to provide law enforcement requirements to the standard-setting organizations, which industry consults in designing telecommunications products and services. Alerting industry to these needs near the beginning of the product development cycle should help lower the costs of meeting law enforcement requirements.

Mr. Chairman, this concludes my remarks. I would be happy to answer any questions you or members of the Subcommittees may have at this time.

ATTACHMENT

LIST OF ORGANIZATIONS CONTACTED BY GAO

Telephone Service Providers

AT&T Company, Bell Atlantic Corporation, BellSouth_Corporation, Motorola, NYNEX Corporation, Pacific Telesis Group, Southwestern Bell Corporation, United States Telephone Association, U.S. West Communications.

Manufacturing and Research

AT&T Company, Bell Communications Research, Motorola.

Law Enforcement

Federal Bureau of Investigation, International Association of Chiefs of Police, National Association of Attorneys General, National District Attorneys Association, National Security Council, National Technical Investigators' Association.

Other

Alliance for Telecommunications Industry Solutions.

Senator LEAHY. Thank you.

I would put in the record the letter I sent to Mr. Bowsher on March 24 of this year requesting the study that you are referring to.

[The letter from Senator Leahy to Mr. Bowsher follows:]

« PrécédentContinuer »