Policy Monitor

Government Use of AI-enabled Facial Recognition Systems

Iran’s e-government services continue to violate the privacy of Iranian citizens

[As we publish this article, protests have been taking place in Iran over multiple days following the death of Mahsa Jhina Amini following her arrest by the country’s ‘Morality Police’ in September 2022. Protestors have been met with the use of force by security forces, killing a number of protestors and leaving many injured. These protests have once again resulted in extensive internet shutdowns across the country to suppress the voice of Iranians. Follow Filterwatch on Twitter for the latest developments on Iran’s internet during the protests.]

Summary

The expansion of e-government services is now posing even more serious threats to the privacy of Iranian citizens. Government officials have been focusing on identity verification requirements for e-Government services as a key part of the evolution of the National Information Network (NIN) project. The latest development in the Iranian government’s plans to further erode the privacy of Iranians is through the use of Artificial Intelligence (AI) enabled facial recognition technology for verification which would allow Iranian officials to identify and track citizens, both online and offline.  

In an interview with an Iranian news outlet on 4 September 2022 the Head of the Morality Association (Persian:ستاد امر به معروف و نهی از منکر)  Mohammad-Saleh Hashemi-Golpayagani stated that  the institution “uses facial recognition technology to identify inappropriate and unusual movements”, including “ failure to observe hijab laws.” He added that “Citizens are identified through a cross-check against a database of images from national ID cards so that legal measures can be taken including  fines and arrests.”  

This is not the first time that the government has misused e-Government databases to identify people for punitive reasons. In the past authorities used cameras for identifying mask violations at the height of the Covid-19 pandemic. In an October 2020 interview the then Deputy Health Minister Alireza Raisi said “Law enforcement have a series of cameras which record everyone’s faces. When a person’s face is recorded, all their information including national ID number and other details etc are there” He added that the very same system that was used for hijab violations was also used for masking and that if a person doesn’t have their mask on “their face was recorded, a message is sent for them and they’re fined.”

The full extent of Iran’s domestic AI-enabled facial recognition technology capabilities are not clear. However, “defining shared, experimental projects in the area of smart and AI technology” was one of the named components of the leaked draft of the  China-Iran 25 year agreement, and there is speculation that China has been assisting Iran in advancing its surveillance technology. There are no legal protections in terms of users’ rights to privacy and security. As a result, Iranian authorities effectively have unrestricted access to Iranians’ personal data via e-Government databases which can be used to identify and prosecute political and civil dissidents. 

Additionally, data breaches and leaks from private and government institutions in Iran are common,  leaving concerns that Iranians’ data could be leaked or stolen by hackers, posing a major threat to the security and privacy of users. 

Iran to use Facial Recognition Technology to Identify “Hijab Violations

In an interview released  on 30 August, the Head of the Morality Association (Persian:ستاد امر به معروف و نهی از منکر ), Mohammad-Saleh Hashemi-Golpayagani,  discussed the use of facial recognition technology to identify and fine women who did not comply with the country’s hijab laws. 

Iranian Official Denies Security Collaboration Between Iran and Russia

In an interview with Mehr News on 24 August, Mohammad Khansari, the Head of Technology and Information Organization, denied the existence of a security agreement with Russia: “We have no plans to work on security matters with Russia; in  terms of  domestic needs, we rely on our own capacities, and at present the services and products we need are provided by domestic companies.”

The National Center for Cyberspace Announces the Creation of Provincial Cyberspace Councils in Every Province in Iran 

On August 28, Amir Khorakian the Spokesperson for the National Center Cyberspace (NCC) announced  the creation of Provincial Cyberspace Councils to be set up in every province in Iran. He emphasized “The widespread [significance] of cyberspace issues across all areas” as a reason for the creation of the Councils. The Councils are said to be in charge of the implementation of the National Information Network (NIN) in each province, as well as using local e-commerce and digital service capabilities to help increase domestic services and content. 

Islamic Development Organization to Issue Licenses for Dating Site 

On August 28, Reza Ezzatzamani, the Head of Family and Population and the Deputy for Culture at the Islamic Development Organization, announced  that dating sites must obtain a license from the organization in order to operate inside the country. The Iranian government actively promotes marriage among Iranians through different schemes, and in July 2021, a government sanctioned dating platform named Hamdam was created. Given the sensitivity of the information shared via dating platforms and government oversight over said platforms, there are major concerns about how this data can be misused.

Government Scheme to Allow Approved Iranian Journalists to Access the  “Unfiltered Internet” 

Iman Shamsai Director General for Media Affairs  at the Ministry of Islamic Guidance stated that his office submitted a list of journalists to the ICT Ministry to be granted unfiltered and unrestricted access to the internet. According to Shamsai, the list includes “the names of all members of the media, including journalists, media activists, and even the directors in charge who are members of the institutions.”

Filterwatch has already written about the Iranian government’s plans to give layered or tiered access to the global internet, meaning different people will have different levels of access to the internet based on their profession and social status, and as approved by the government. Such a scheme further erodes digital rights in Iran by allowing the government greater surveillance powers over how international content and services are accessed and restricts internet access for the majority of Iranians inside the country. 

Further Increase in Mobile Internet Prices in Iran According to the ICT Ministry  

On 30 August Deputy ICT Minister, Sadeq Abassi Shahkuh  announced that the government will be “forced to raise the price of mobile internet to sustain and upkeep networks.”The announcement comes as in April this year an internet price increase of between 60-100%  was made. It should also be noted that the majority of those inside Iran rely on mobile networks to connect to the internet and face regular internet disruptions and shutdowns.

Iran’s Cryptocurrency Mining  Guidelines Approved by the Government 

On August 29, Reza Fatemi-Amin, Minister for Industry, Mines, and Trade announced guidelines for cryptocurrency extraction had been “approved by the government “. The guidelines require  that the Ministry oversees crypto mining centers and asks that other ministries cooperate as needed. The value of every kilowatt-hour (kWh) consumed by centers using  the national network is to be pegged to the average cost of exported electricity, based on the NIMA system for official exchange rates. Any unlawful cryptocurrency mining is to be prosecuted. 

Iran Reports Production of 5G Modem with Government Support

On August 27, Iran’s ISNA News Agency reported on the production of the country’s first domestic-produced  5G modem. The Director of Planning valuation for  Advanced Industries Fund (affiliated with the Ministry for  Industry, Mines, and Trade), Naser Biari, said that his institution had supported the knowledge-based companies that produced the modem. The modem is said to have been developed by a mobile network  operator, however, they were named in the report. Given the large number of sanctions impacting Iran’s trade and finances, it has had to focus on its domestic capabilities to advance its network infrastructure.  

Iran’s ICT Minister Blames Internet Disruptions on Old Infrastructure 

On August 17, ICT Minister  Eisa Zarepour spoke on the government’s infrastructure plans for expanding access to the internet and inter-city communications. He also mentioned plans for using fiber optic networks – which has been a long term plan for the ICT Ministry which he stated could  – increase access speeds by a factor of tens or hundreds.” He added that  “The problem [of slow internet speeds] is chronic, and the country’s aging infrastructure – which in some cases hasn’t been renovated in a decade – is the cause of some of these problems. ” 

Iranians have been experiencing extensive and chronic internet disruptions which the officials have blamed on a number of reasons, despite the long-term planning for the expansion of the NIN and promoting domestic services while limiting international services for Iranians inside the country even further. 

Iranian Government Plans to ‘Strengthen its  Cyber Defense Shield’

On August 29, Iranian news outlet detailed the government’s plan for strengthening its cyber defense systems against attacks. Adjusting  the” division of labor” among different organizations overseeing the government’s cyber security area is a priority for the ICT Ministry for achieving better cybersecurity programs. According to Hamshahri, increased collaboration with Russia is also being pursued to improve Iran’s cybersecurity despite denials from officials. 

Iran suffered several cyberattacks to its critical infrastructure last year which resulted in widespread disruptions across the country.