Operation Eikonal

Radomes at the Fernmeldeverkehrstelle des Bundesnachrichtendiensts (BND-Codename: Hortensie III, abbreviated 3 D 30), part of the Bad Aibling Station in Bavaria. This facility was run by the National Security Agency (NSA) until 2004 as part of ECHELON,[1] and later, after transfer to the Bundesnachrichtendienst (BND), was used by the Special US Liaison Activity Germany, where the NSA and BND jointly analysed data captured under Operation Eikonal.[2]

Operation Eikonal is a collaboration between the National Security Agency (NSA) and Bundesnachrichtendienst (BND) for the sharing of telephony and Internet data captured in Germany.[3] It is based on an agreement that dates to 2002,[4] and is part of the NSA operation "RAMPART-A".[5] Surveillance started in 2003, telephony data was collected from 2004 onwards, and all Internet traffic from the Deutsche Telekom (DT) switching center in Frankfurt was captured starting in 2005.[6]

To obtain the data, the BND and DT worked together. The agents rented two rooms in the DT data center in Frankfurt where the fiber optic data cable owned by DT was spliced into, and a copy of the data was captured.[7] DT received 6000 euros monthly for its role in giving access to data.[8]

A filtering program named Dafis was used to prevent the sharing of data from German citizens; however, that filter was estimated to be only 95% effective, meaning that 5% of data was obtained in breach of Germany's constitution (Grundgesetz).[8] Later, during parliamentary hearings conducted on November 6, 2014, one witness claimed that the 95% figure was only correct for the initial testing and that during operation, 99% of data from German citizens was filtered out.[9]

In January 2006, the Bad Aibling branch of the BND reported to its headquarters in Pullach that the "selectors" (search terms) used by the NSA under the programme included some terms targeting the European Aeronautic Defence and Space Company (EADS) and the Eurocopter project[10] as well as French administration.[11] These selectors were first noticed by BND employees in 2005.[10] Other selectors were found to target the administration of Austria.[12] After the revelations made by whistleblower Edward Snowden the BND decided to investigate the issue; their October 2013 conclusion was that at least 2,000 of these selectors were aimed at Western European or even German interests which has been a violation of the Memorandum of Agreement that the US and Germany signed in 2002 in the wake of the 9/11 terror attacks.[13] After reports emerged in 2014 that EADS and Eurocopter had been surveillance targets the Left Party and the Greens filed an official request to obtain evidence of the violations.[13][14]

The BND's project group charged with supporting the NSA investigative committee in German parliament set up in spring 2014, reviewed the selectors and discovered 40,000 suspicious search parameters, including espionage targets in Western European governments and numerous companies. The group also confirmed suspicions that the NSA had systematically violated German interests and concluded that the Americans could have perpetrated economic espionage directly under the Germans' noses.[13][15] The investigative parliamentary committee was not granted access to the NSA's selectors list as an appeal led by opposition politicians failed at Germany's top court – instead the ruling coalition appointed an administrative judge, Kurt Graulich, as a "person of trust" who was granted access to the list and briefed the investigative commission on its contents after analyzing the 40,000 parameters.[16][17] In his almost 300-page report[18] Graulich concluded that European government agencies were targeted massively and that Americans hence broke contractual agreements. He also found that German targets which received special protection from surveillance of domestic intelligence agencies by Germany's Basic Law (Grundgesetz) – including numerous enterprises based in Germany − were featured in the NSA's wishlist in a surprising plenitude.[19] While the magnitude differs, there have also been problematic BND-internal selectors which have been used until end of 2013 - around two thirds of 3300 targets were related to EU and NATO states.[20][21][22] Klaus Landefeld, member of the board at the Internet industry association Eco International, has met intelligence officials and legislators to present suggestions for improvement, like streamlining the selector system.[23]

Information on Operation Eikonal was first unveiled by Süddeutsche Zeitung, Norddeutscher Rundfunk and Westdeutscher Rundfunk on October 3, 2014.[24] Although some documents suggested that the operation had been completed in 2008,[25] it was revealed that in December 2012, there were still transfers of 500 million metadata per month being made.[26][27] Of these 500 million datasets, 180 million were captured using XKeyscore.[28]

Austrian member of parliament Peter Pilz described the operation as "the first successful attempt at mass surveillance of European telecommunications".[4]

References

  1. ^ "BND – Die Überwachungsfabrik". Süddeutsche.de (in German).
  2. ^ "Bad Aibling: NSA-Standorte in Deutschland". Spiegel Online (in German). Hamburg, Germany. 18 June 2014.
  3. ^ "BND übermittelte Daten deutscher Bürger an NSA". Süddeutsche.de.
  4. ^ a b Fabian Schmid. "Pilz: Berlin genehmigte NSA-Spionage gegen Österreich". derStandard.at.
  5. ^ "German disclosure raises questions about Danish NSA-partnership".
  6. ^ "Operation Eikonal: Daten deutscher Bürger gingen von 2004 bis 2008 an die NSA – Golem.de". golem.de (in German).
  7. ^ "Daten abfischen mit Lizenz aus dem Kanzleramt" (in German).
  8. ^ a b "Eikonal: Der kalkulierte Grundrechtsbruch der Bundesregierung – Wie der BND der NSA Zugang zum Internetknoten DE-CIX schenkte". netzpolitik.org (in German).
  9. ^ "Live-Blog aus dem Geheimdienst-Untersuchungsausschuss: "Funktionsträger fallen nicht unter G-10-Schutz"" (in German).
  10. ^ a b "BND und NSA: Die Chronologie des Spionageskandals – Politik – Tagesspiegel". tagesspiegel.de (in German).
  11. ^ "Wie die NSA europäische Unternehmen ausspionierte". Süddeutsche.de (in German).
  12. ^ "NSA-Spitzelei: BND soll 12.000 Suchbegriffe gelöscht haben" (in German). Frankfurter Allgemeine Zeitung GmbH. 1 May 2015.
  13. ^ a b c "Spying Close to Home: German Intelligence Under Fire for NSA Cooperation - SPIEGEL ONLINE - International". SPIEGEL ONLINE. Retrieved 4 January 2017.
  14. ^ "Bundesverfassungsgericht - BVerfG, Beschluss des Zweiten Senats vom 13. n". BundesVerfassungsGericht.de (in German). 13 October 2016. Retrieved 4 January 2017.
  15. ^ Denkler, Thorsten. "Geheimdienst-Affäre: NSA jubelte BND deutsche Spähziele unter" (in German). Süddeutsche Zeitung. Retrieved 4 January 2017.
  16. ^ "German Constitutional Court rules out access to NSA's 'selectors' list". Deutsche Welle. Retrieved 4 January 2017.
  17. ^ "Designierter NSA-Sonderermittler: Ein Mann, 40.000 brisante Daten". SPIEGEL ONLINE. Retrieved 4 January 2017.
  18. ^ "Der Graulich-Abschlussbericht" (PDF). Retrieved 4 January 2017.
  19. ^ "Geheimdienstaffäre: Sonderermittler spricht von klarem Vertragsbruch der NSA". SPIEGEL ONLINE. Retrieved 4 January 2017.
  20. ^ "Geheimdienstkontrolleure: BND hat gegen Recht und Auftrag verstoßen" (in German). Heise Online. Retrieved 4 January 2017.
  21. ^ "BND hat jahrelang unter Freunden spioniert". Deutsche Welle. Retrieved 4 January 2017.
  22. ^ Decker, Markus. "Geheimdienst-Affäre: BND spitzelte mit eigenen Selektoren" (in German). Frankfurter Rundschau. Retrieved 4 January 2017.
  23. ^ Somaskanda, Sumi. "Is Big Brother coming to Germany?". Al Jazeera. Retrieved 4 January 2017.
  24. ^ "Zusammenarbeit zweier Geheimdienste: Codename "Eikonal" – tagesschau.de". tagesschau.de (in German). 22 April 2015.
  25. ^ "Geheimdienstkoordinator bedauert, dass Eikonal-Dokumente geleakt wurden. Die dokumentierten Grundrechtsverletzungen bedauert er leider nicht". netzpolitik.org (in German).
  26. ^ "NSA-Affäre: BND nennt Details über Datentransfer an NSA" (in German). Frankfurter Allgemeine Zeitung GmbH. 3 August 2013.
  27. ^ "NSA überwacht 500 Millionen Verbindungen in Deutschland". Spiegel Online. Hamburg, Germany. 30 June 2013.
  28. ^ "BND und BfV setzen NSA-Spähprogramm XKeyscore ein". Spiegel Online (in German). Hamburg, Germany. 20 July 2013.