In the world of German intelligence, secret documents do not reach employees of the German Constitutional Protection Service (the domestic intelligence agency) easily. Rather, in order to access files classified as “secret” or “top secret,” they must connect through dedicated computer systems within the workplace.
Not only that, but the process of transferring files electronically is subject to strict security controls. Documents classified as “secret” and “top secret” are stored on specially isolated and secured networks, which makes the exchange of sensitive information between German intelligence services a complex process.
However, the German authorities are currently seeking to change such a mechanism, according to a press report.
An investigation conducted by the VDR and NDR networks revealed that the German intelligence services are working on developing a cloud platform that will allow the exchange of information electronically, even if it is classified as “secret.”
The investigation added that the project aims to enhance the efficiency of data exchange between different devices, while the authorities are considering relying on technology belonging to Google within the technical structure of the system.
Those in charge of the project stressed that digital sovereignty is one of the declared principles of the project.
How much does it cost?
The "Tagesschau" website said that the "cloud platform" is scheduled to be used by three entities: the Federal Authority for the Protection of the Constitution, the German Foreign Intelligence Service, and the Military Counterintelligence Service of the German Army.
The investigation indicated that, if the project is implemented, it will enable, for the first time, the exchange of large data classified to the level of “confidential” quickly and efficiently between the three parties.
According to the information, this cloud will rely on a system known as “Google’s Distributed Cloud,” which operates independently without a direct connection to the Internet or Google.
This data is supposed to be stored inside Germany and Google will not be able to access it so that this cloud serves as a separate information network with a high level of protection.
The project is facing some delays as it was supposed to see the light next year, but the cloud components are still being approved by the Federal Office for Information Security.
The investigation indicated that the cost of the project may reach 500 million euros.
Digital sovereignty
The investigation quoted Sven Herbig, head of the cybersecurity department at the European “Interface” organization specializing in technology policies, as saying that “if consent is granted, it can be assumed that the conditions for storing and processing data for this sensitive type of content have been met.”
However, he added that future updates may lead to changes in the software. In that, he said, “The updates will still come from Google. Here the question arises: Can the operator in Germany evaluate the potential effects of each update? What is the size of the changes that require re-evaluating the update version and granting it a new license?”
The report believes that choosing a Google product seems somewhat contradictory to previous statements by security officials regarding digital sovereignty.
In this context, Sinan Selin, head of the Federal Authority for the Protection of the Constitution, said last year that “we must ultimately be able to provide alternatives,” in response to a question about the use of American programs to analyze data.
For its part, the authority said that its ability “to work and innovate depends directly on the availability of modern technical systems and advanced technological platforms. European solutions receive special attention in order to enhance technical flexibility.”
According to current plans, the intelligence services intend to use BWI, the technical arm of the German army, to operate the “intelligence cloud.”
