PRISM 棱镜计划
 National Security Agency surveillance <a id=3>国家安全局</a> 监控 |
|---|
 |
|
|
| Part of a series on 作为 <a id=5>一系列</a>的一部分 |
| Global surveillance 全球监控 |
|---|
 |
| Disclosures 披露 |
| Systems 系统 |
| Agencies 机构 |
| Places 地点 |
| Laws 法律 |
|
| Proposed changes 《拟议的变更》 |
| Concepts 概念 |
| Related topics 相关主题 |
PRISM is a code name for a program under which the United States National Security Agency (NSA) collects internet communications from various U.S. internet companies.[1][2][3] The program is also known by the SIGAD US-984XN.[4][5] PRISM collects stored internet communications based on demands made to internet companies such as Google LLC and Apple under Section 702 of the FISA Amendments Act of 2008 to turn over any data that match court-approved search terms.[6] Among other things, the NSA can use these PRISM requests to target communications that were encrypted when they traveled across the internet backbone, to focus on stored data that telecommunication filtering systems discarded earlier,[7][8] and to get data that is easier to handle.[9]
棱镜计划是美国国家安全局（NSA）从各美国互联网公司收集互联网通信的一个项目的代号。该计划也被称为 SIGAD。棱镜计划根据 2008 年《外国情报监视法修正案》第 702 节向谷歌有限责任公司和苹果等互联网公司提出的要求，收集存储的互联网通信，以交出任何与法院批准的搜索词匹配的数据。此外，美国国家安全局还可以利用这些“棱镜”计划的请求，针对在互联网骨干网中传输时加密的通信，将重点放在电信过滤系统早些时候丢弃的存储数据上，以及获取更容易处理的数据。[9]
PRISM began in 2007 in the wake of the passage of the Protect America Act under the Bush Administration.[10][11] The program is operated under the supervision of the U.S. Foreign Intelligence Surveillance Court (FISA Court, or FISC) pursuant to the Foreign Intelligence Surveillance Act (FISA).[12] Its existence was leaked six years later by NSA contractor Edward Snowden, who warned that the extent of mass data collection was far greater than the public knew and included what he characterized as "dangerous" and "criminal" activities.[13] The disclosures were published by The Guardian and The Washington Post on June 6, 2013. Subsequent documents have demonstrated a financial arrangement between the NSA's Special Source Operations (SSO) division and PRISM partners in the millions of dollars.[14]
棱镜计划始于 2007 年，当时正值布什政府通过《保护美国法案》之后。该计划是在美国外国情报监督法院（FISA 法院或 FISC）的监督下，根据《外国情报监视法》（FISA）实施的。六年后，NSA 承包商爱德华·斯诺登泄露了该计划的存在，他警告说，大规模数据收集的程度远远超出公众所知，其中包括他所说的“危险”和“犯罪”活动。这些披露于 2013 年 6 月 6 日由《卫报》和《华盛顿邮报》发表。随后的文件表明，NSA 的特别来源行动（SSO）部门与棱镜计划合作伙伴之间存在数百万美元的财务安排。<sup id=77><a id=78><span id=79></span></a></sup>
Documents indicate that PRISM is "the number one source of raw intelligence used for NSA analytic reports", and it accounts for 91% of the NSA's internet traffic acquired under FISA section 702 authority."[15][16] The leaked information came after the revelation that the FISA Court had been ordering a subsidiary of telecommunications company Verizon Communications to turn over logs tracking all of its customers' telephone calls to the NSA.[17][18]
文档表明，“棱镜”是 NSA 用于分析报告的“原始情报的首要来源”，占 NSA 根据《外国情报监控法》第 702 条授权获取的互联网流量的 91%。<sup id=81><a id=82><span id=83></span></a></sup><sup id=85><a id=86><span id=87></span></a></sup>泄露的信息是在《外国情报监控法》法院下令电信公司威瑞森通信的一家子公司向 NSA 提供所有客户电话记录的消息被披露之后。<sup id=91><a id=92><span id=93></span></a></sup><sup id=95><a id=96><span id=97></span></a></sup>
U.S. government officials have disputed criticisms of PRISM in the Guardian and Washington Post articles and have defended the program, asserting that it cannot be used on domestic targets without a warrant. Additionally claiming the program has helped to prevent acts of terrorism, and that it receives independent oversight from the federal government's executive, judicial and legislative branches.[19][20] On June 19, 2013, U.S. President Barack Obama, during a visit to Germany, stated that the NSA's data gathering practices constitute "a circumscribed, narrow system directed at us being able to protect our people."[21]
美国政府官员对《卫报》和《华盛顿邮报》文章中对 PRISM 的批评提出异议，并为该计划辩护，称在没有 授权的情况下，该计划不能用于国内目标。此外，他们还声称该计划有助于预防恐怖主义行为，并且该计划受到联邦政府的 行政、司法和 立法部门的独立监督。[19][20]2013 年 6 月 19 日，美国总统 巴拉克·奥巴马在访问德国时表示，国家安全局的数据收集行为构成“一个有限的、狭窄的系统，旨在保护我们的人民。”[21]
Media disclosure of PRISM
PRISM 的媒体披露
[edit]Edward Snowden publicly revealed the existence of PRISM through a series of classified documents leaked to journalists of The Washington Post and The Guardian while Snowden, who was an NSA contractor at the time, was visiting Hong Kong.[1][2] The leaked documents included 41 PowerPoint slides, four of which were published in news articles.[1][2]
爱德华·斯诺登通过泄露给《华盛顿邮报》和《卫报》记者的一系列机密文件，公开揭示了 PRISM 的存在，当时斯诺登是 NSA 的承包商，正在访问香港。[1][2]泄露的文件包括 41 张幻灯片，其中四张在新闻文章中发表。[1][2]
The documents identified several technology companies as participants in the PRISM program, including Microsoft in 2007, Yahoo! in 2008, Google in 2009, Facebook in 2009, Paltalk in 2009, YouTube in 2010, AOL in 2011, Skype in 2011 and Apple in 2012.[22] The speaker's notes in the briefing document reviewed by The Washington Post indicated that "98 percent of PRISM production is based on Yahoo, Google, and Microsoft".[1]
文件中确定了几家参与“棱镜”计划的技术公司，包括 2007 年的微软、2008 年的雅虎、2009 年的谷歌、2009 年的脸书、2009 年的帕络特、2010 年的油管、2011 年的美国在线、2011 年的Skype以及 2012 年的苹果。[22]《华盛顿邮报》审查的简报文件中的发言者注释指出，“98%的‘棱镜’计划成果基于雅虎、谷歌和微软”。[1]
The slide presentation stated that much of the world's electronic communications pass through the U.S., because electronic communications data tend to follow the least expensive route rather than the most physically direct route, and the bulk of the world's internet infrastructure is based in the United States.[15] The presentation noted that these facts provide United States intelligence analysts with opportunities for intercepting the communications of foreign targets as their electronic data pass into or through the United States.[2][15]
幻灯片演示文稿指出，世界上的许多电子通信都要通过美国，因为电子通信数据往往遵循最便宜的路线，而不是最直接的物理路线，而且世界上大部分互联网基础设施都设在美国。[15]演示文稿指出，这些事实为美国情报分析人员提供了机会，可以在外国目标的电子数据进入或通过美国时拦截他们的通信。[2][15]
Snowden's subsequent disclosures included statements that government agencies such as the United Kingdom's GCHQ also undertook mass interception and tracking of internet and communications data[23] – described by Germany as "nightmarish" if true[24] – allegations that the NSA engaged in "dangerous" and "criminal" activity by "hacking" civilian infrastructure networks in other countries such as "universities, hospitals, and private businesses",[13] and alleged that compliance offered only very limited restrictive effect on mass data collection practices (including of Americans) since restrictions "are policy-based, not technically based, and can change at any time", adding that "Additionally, audits are cursory, incomplete, and easily fooled by fake justifications",[13] with numerous self-granted exceptions, and that NSA policies encourage staff to assume the benefit of the doubt in cases of uncertainty.[25][26][27]
斯诺登随后的披露包括，政府机构，如英国的 GCHQ，也进行了大规模拦截和跟踪互联网和通信数据的声明[23]——德国称，如果属实，这将是“噩梦般的”[24]——这些指控还包括，NSA 通过“黑客”攻击其他国家的民用基础设施网络，如“大学、医院和私营企业”，从事“危险”和“犯罪”活动[13]，并声称合规性对大规模数据收集做法（包括对美国人）的限制非常有限，因为限制“是基于政策的，而不是基于技术的，并且可以随时改变”，此外，“审计”草率、不完整，很容易被虚假理由所欺骗”[13]，并且有许多自行授予的例外情况，NSA 的政策也存在问题鼓励员工在不确定的情况下假定有利的一面。<sup id=193><a id=194><span id=195>[
The slides 幻灯片
[edit]Below are a number of slides released by Edward Snowden showing the operation and processes behind the PRISM program. The "FAA" referred to is Section 702 of the FISA Amendments Act ("FAA"), and not the Federal Aviation Administration, which is more widely known by the same FAA initialism.[28]
以下是爱德华·斯诺登发布的一些幻灯片，展示了 PRISM 计划背后的运作和流程。这里的“FAA”指的是《外国情报监视法修正案》（FISA Amendments Act）的第 702 节（FAA），而不是更为人所知的 FAA 缩写，即联邦航空管理局。<sup id=205><a id=206><span id=207>[
-
Introduction slide 介绍幻灯片 -
Slide showing that much of the world's communications flow through the U.S.
幻灯片显示世界上大部分通信都通过美国流动 -
Details of information collected via PRISM
通过 PRISM 收集的信息详情 -
Slide listing companies and the date that PRISM collection began
列出公司以及 PRISM 收集开始日期的幻灯片 -
Slide showing PRISM's tasking process
显示 PRISM 任务处理过程的幻灯片 -
Slide showing the PRISM collection dataflow
显示 PRISM 收集数据流的幻灯片 -
Slide showing PRISM case numbers
显示 PRISM 案例编号的幻灯片 -
Slide showing the REPRISMFISA Web app
显示 REPRISMFISA Web 应用程序的幻灯片 -
Slide showing some PRISM targets.
显示一些 PRISM 目标的幻灯片 -
Slide fragment mentioning "upstream collection", FAA702, EO 12333, and references yahoo.com explicitly in the text
幻灯片片段提及“上游收集”、FAA702、EO 12333，并在文本中明确提及 yahoo.com -
FAA702 Operations, and map
FAA702 行动和地图 -
FAA702 Operations, and map. The subheader reads "Collection only possible under FAA702 Authority". FAIRVIEW is in the center box.
FAA702 行动和地图。子标题为“在 FAA702 授权下仅可进行收集”。FAIRVIEW 在中心框中。 -
-
![Tasking, Points to Remember. Transcript of body: "Whenever your targets meet FAA criteria, you should consider asking to FAA. Emergency tasking processes exist for [imminent /immediate ] threat to life situations and targets can be placed on [illegible] within hours (surveillance and stored comms). Get to know your Product line FAA adjudicators and FAA leads."](//upload.wikimedia.org/wikipedia/commons/thumb/d/de/Prism-blurry-frag-1.png/150px-Prism-blurry-frag-1.png)
Tasking, Points to Remember. Transcript of body: "Whenever your targets meet FAA criteria, you should consider asking to FAA. Emergency tasking processes exist for [imminent /immediate ] threat to life situations and targets can be placed on [illegible] within hours (surveillance and stored comms). Get to know your Product line FAA adjudicators and FAA leads."
任务，需要记住的要点。正文抄本：“只要您的目标符合 FAA 标准，您应该考虑向 FAA 提出请求。针对生命受到即刻威胁的紧急任务处理流程已经存在，并且可以在数小时内将目标放置在[模糊不清]上（监视和存储的通信）。了解您的产品系列 FAA 裁决者和 FAA 负责人。”
![Tasking, Points to Remember. Transcript of body: "Whenever your targets meet FAA criteria, you should consider asking to FAA. Emergency tasking processes exist for [imminent /immediate ] threat to life situations and targets can be placed on [illegible] within hours (surveillance and stored comms). Get to know your Product line FAA adjudicators and FAA leads."](/wiki/File:Prism-blurry-frag-1.png)
The French newspaper Le Monde disclosed new PRISM slides (see pages 4, 7 and 8) coming from the "PRISM/US-984XN Overview" presentation on October 21, 2013.[29] The British newspaper The Guardian disclosed new PRISM slides (see pages 3 and 6) in November 2013 which on the one hand compares PRISM with the Upstream program, and on the other hand deals with collaboration between the NSA's Threat Operations Center and the FBI.[30]
法国报纸《世界报》披露了新的“棱镜”幻灯片（见第 4、7 和 8 页），这些幻灯片来自于 2013 年 10 月 21 日的“棱镜/美国-984XN 概述”演示。[29]英国报纸《卫报》在 2013 年 11 月披露了新的“棱镜”幻灯片（见第 3 和 6 页），一方面将“棱镜”计划与“上游计划”进行了比较，另一方面涉及 NSA 威胁行动中心与联邦调查局之间的合作。[30]
The program 该计划
[edit]
PRISM is a program from the Special Source Operations (SSO) division of the NSA, which in the tradition of NSA's intelligence alliances, cooperates with as many as 100 trusted U.S. companies since the 1970s.[1] A prior program, the Terrorist Surveillance Program,[31][32] was implemented in the wake of the September 11 attacks under the George W. Bush Administration but was widely criticized and challenged as illegal, because it did not include warrants obtained from the Foreign Intelligence Surveillance Court.[32][33][34][35][36] PRISM was authorized by the Foreign Intelligence Surveillance Court.[15]
棱镜计划是 NSA 下属的特别情报行动处（SSO）的一个项目，该计划沿袭 NSA 的情报联盟传统，自 20 世纪 70 年代以来，与多达 100 家美国信誉良好的公司合作。[1]在此之前，一个名为“恐怖分子监控计划”的项目[31][32]是在“9·11”袭击事件后，在小布什政府的领导下实施的，但由于该计划没有包括从外国情报监控法庭获得的授权，因此受到了广泛的批评和质疑，被认为是非法的。[33][32][33][34][35][36] PRISM 是经外国情报监控法庭授权的。[15]
PRISM was enabled under President Bush by the Protect America Act of 2007 and by the FISA Amendments Act of 2008, which immunizes private companies from legal action when they cooperate with U.S. government agencies in intelligence collection. In 2012 the act was renewed by Congress under President Obama for an additional five years, through December 2017.[2][37][38] According to The Register, the FISA Amendments Act of 2008 "specifically authorizes intelligence agencies to monitor the phone, email, and other communications of U.S. citizens for up to a week without obtaining a warrant" when one of the parties is outside the U.S.[37]
PRISM 在 小布什总统 的领导下，根据 2007 年的《保护美国法》和 2008 年的《外国情报监视法修正案》得以启用，该修正案使私营公司在与美国政府机构合作进行情报收集时免受法律诉讼。2012 年，该法案在 国会的领导下，由 奥巴马总统再次通过，有效期延长至 2017 年 12 月。[2][37][38]据The Register报道，2008 年的《外国情报监视法修正案》“具体授权情报机构在一方在美国境外的情况下，无需获得授权即可监控美国公民的电话、电子邮件和其他通信长达一周”。[37]
The most detailed description of the PRISM program can be found in a report about NSA's collection efforts under Section 702 FAA, that was released by the Privacy and Civil Liberties Oversight Board (PCLOB) on July 2, 2014.[39]
可以在隐私和公民自由监督委员会（PCLOB）于 2014 年 7 月 2 日发布的一份关于 NSA 根据《外国情报监视法》第 702 条开展收集工作的报告中找到对 PRISM 计划的最详细描述。[39]
According to this report, PRISM is only used to collect internet communications, not telephone conversations. These internet communications are not collected in bulk, but in a targeted way: only communications that are to or from specific selectors, like e-mail addresses, can be gathered. Under PRISM, there's no collection based on keywords or names.[39]
根据该报告，PRISM 仅用于收集互联网通信，而不收集电话通话。这些互联网通信不是批量收集的，而是有针对性的：只能收集到或来自特定选择器（如电子邮件地址）的通信。在 PRISM 下，不会基于关键词或姓名进行收集。[39]
The actual collection process is done by the Data Intercept Technology Unit (DITU) of the FBI, which on behalf of the NSA sends the selectors to the U.S. internet service providers, which were previously served with a Section 702 Directive. Under this directive, the provider is legally obliged to hand over (to DITU) all communications to or from the selectors provided by the government.[39] DITU then sends these communications to NSA, where they are stored in various databases, depending on their type.
实际的收集过程是由联邦调查局的数据拦截技术部门（DITU）进行的，该部门代表国家安全局向美国互联网服务提供商发送选择器，这些提供商此前曾收到第 702 指令。根据该指令，提供商在法律上有义务将政府提供的选择器的所有通信（发送给 DITU）。DITU 然后将这些通信发送给国家安全局，在那里根据其类型存储在各种数据库中。
Data, both content and metadata, that already have been collected under the PRISM program, may be searched for both US and non-US person identifiers. These kinds of queries became known as "back-door searches" and are conducted by NSA, FBI and CIA.[40] Each of these agencies has slightly different protocols and safeguards to protect searches with a US person identifier.[39]
已经根据棱镜计划收集的数据，无论是内容还是元数据，都可以搜索美国和非美国人员的标识符。这些类型的查询被称为“后门搜索”，由国家安全局、联邦调查局和中央情报局进行。这些机构中的每一个都有略微不同的协议和保障措施来保护带有美国人员标识符的搜索。
Extent of the program 计划的范围
[edit]Internal NSA presentation slides included in the various media disclosures show that the NSA could unilaterally access data and perform "extensive, in-depth surveillance on live communications and stored information" with examples including email, video and voice chat, videos, photos, voice-over-IP chats (such as Skype), file transfers, and social networking details.[2] Snowden summarized that "in general, the reality is this: if an NSA, FBI, CIA, DIA, etc. analyst has access to query raw SIGINT [signals intelligence] databases, they can enter and get results for anything they want."[13]
各种媒体披露中包含的内部 NSA 演示文稿幻灯片显示，NSA 可以单方面访问数据，并对“实时通信和存储信息”进行“广泛、深入的监控”，其中包括电子邮件、视频和语音聊天、视频、照片、IP 语音聊天（如 Skype）、文件传输和社交网络详细信息。[2]斯诺登总结说：“总的来说，现实情况是这样的：如果 NSA、FBI、CIA、DIA 等分析师可以访问查询原始（信号情报）数据库，他们可以输入并获得他们想要的任何东西的结果。”[13]
According to The Washington Post, the intelligence analysts search PRISM data using terms intended to identify suspicious communications of targets whom the analysts suspect with at least 51 percent confidence to not be U.S. citizens, but in the process, communication data of some U.S. citizens are also collected unintentionally.[1] Training materials for analysts tell them that while they should periodically report such accidental collection of non-foreign U.S. data, "it's nothing to worry about."[1][41]
据《华盛顿邮报》报道，情报分析人员使用旨在识别涉嫌与分析师怀疑至少 51%不是美国公民的目标的可疑通信的术语来搜索 PRISM 数据，但在此过程中，一些美国公民的通信数据也会被无意收集。[1]分析人员的培训材料告诉他们，虽然他们应该定期报告此类意外收集的非外国美国数据，但“不必担心”。[1][41]
According to The Guardian, NSA had access to chats and emails on Hotmail.com and Skype because Microsoft had "developed a surveillance capability to deal" with the interception of chats, and "for Prism collection against Microsoft email services will be unaffected because Prism collects this data prior to encryption."[42][43]
根据《卫报》的报道，NSA 可以访问 Hotmail.com 和 Skype 上的聊天和电子邮件，因为微软“开发了一种监控能力来处理”对聊天的拦截，并且“由于棱镜在加密前就收集了这些数据，因此针对微软电子邮件服务的棱镜收集将不受影响。”[42][43]
Also according to The Guardian's Glenn Greenwald even low-level NSA analysts are allowed to search and listen to the communications of Americans and other people without court approval and supervision. Greenwald said low level Analysts can, via systems like PRISM, "listen to whatever emails they want, whatever telephone calls, browsing histories, Microsoft Word documents.[31] And it's all done with no need to go to a court, with no need to even get supervisor approval on the part of the analyst."[44]
同样根据《卫报》的格伦·格林瓦尔德的说法，即使是低级 NSA 分析师也可以在没有法庭批准和监督的情况下搜索和监听美国人和其他人的通信。格林瓦尔德说，低级分析师可以通过 PRISM 等系统，“监听他们想要的任何电子邮件、任何电话通话、浏览历史记录、Microsoft Word文档。”