Chinese authorities are using a mobile app designed for mass surveillance to profile, investigate and detain Muslims in Xinjiang by labelling "completely lawful" behaviour as suspicious, a Human Rights Watch report said on Thursday.
Beijing has come under international criticism over its policies in the northwest region of Xinjiang, where as many as one million and other mostly Muslim minorities are , according to a group of experts cited by the UN.
Human Rights Watch has previously reported that to gather information from multiple sources, such as facial-recognition cameras, wifi sniffers, police checkpoints, banking records and home visits.
But the new study, entitled 'China's Algorithms of Repression', worked with a Berlin-based security company to analyse an app connected to the IJOP, showing specific acts targeted by the system.
Uighur security personnel patrol near the Id Kah Mosque in Kashgar in western China's Xinjiang region. Source: AP
Xinjiang authorities closely watch 36 categories of behaviour, including those who do not socialise with neighbours, often avoid using the front door, don't use a smartphone, donate to mosques "enthusiastically", and use an "abnormal" amount of electricity, the group found.
The app also instructs officers to investigate those related to someone who got a new phone number or related to others who left the country and have not returned after 30 days.
"Our research shows, for the first time, that Xinjiang police are using illegally gathered information about people's completely lawful behaviour – and using it against them," Maya Wang, senior China researcher at Human Rights Watch, said.
"The Chinese government is monitoring every aspect of people's lives in Xinjiang, picking out those it mistrusts and subjecting them to extra scrutiny."
A guard tower and barbed wire fences are seen around a facility in the Kunshan Industrial Park in Artux in western China's Xinjiang region. Source: AP
'Moving red-line'
The human rights group obtained a copy of the app and enlisted cybersecurity firm Cure53 to "reverse-engineer" it - to disassemble it and look at its design and data - and examined its source code.
Along with collecting personal information, the app prompts officials to file reports about people, vehicles and events they find suspect - and sends out "investigative missions" for police to follow up.
Officers are also asked to check whether suspects use any of the 51 internet tools that are deemed suspicious, including foreign messaging platforms popular outside China like WhatsApp, LINE and Telegram.
A number of people said they or their family members have been detained for having software such as WhatsApp or a Virtual Private Network (VPN) installed on their phones during checks by authorities, according to the report.
Muslim men of the Uighur ethnic group leave the Id Kah Mosque after Friday prayers in Kashgar, Xinjiang. Source: AAP
Human Rights Watch said its findings suggest the IJOP system tracks data of everyone in Xinjiang by monitoring location data from their phones, ID cards and vehicles, plus electricity and gas station usage.
"Psychologically, the more people are sure that their actions are monitored and that they, at anytime, can be judged for moving outside of a safe grey-space, the more likely they are to do everything to avoid coming close to crossing a moving red-line," Samantha Hoffman, an analyst at the Australian Strategic Policy Institute's International Cyber Policy Centre, said.
"There is no rule of law in China, the Party ultimately decides what is legal and illegal behaviour, and it doesn't have to be written down."
The IJOP app was developed by Hebei Far East Communication System Engineering Company (HBFEC), which at the time of the app's development was fully-owned by China Electronics Technology Group Corporation, a state-owned technology giant (CETC), Human Rights Watch said.
CETC could not be reached and HBFEC did not respond to requests for comment.
Washington last year imposed export controls on key Chinese companies including HBFEC and other institutions under CETC, citing risks to US national security and foreign policy interests.
Greg Walton, an independent cybersecurity expert who advised on the report, said while the system is a "blunt instrument that may be directly contributing to the massive numbers of people in internment camps", the data, if stored, could be used in the future for more advanced policing algorithms.
"This means that data collected through the app today may well be analysed in a few years' time by far more sophisticated logic," he said.
