I 
116TH CONGRESS 
2D SESSION 
H. R. 7204 
To direct the Assistant Secretary of Commerce for Communications and 
Information to submit to Congress a report examining the cybersecurity 
of mobile service networks, and for other purposes. 
IN THE HOUSE OF REPRESENTATIVES 
JUNE 15, 2020 
Ms. ESHOO (for herself and Mr. KINZINGER) introduced the following bill; 
which was referred to the Committee on Energy and Commerce 
A BILL 
To direct the Assistant Secretary of Commerce for Commu-
nications and Information to submit to Congress a report 
examining the cybersecurity of mobile service networks, 
and for other purposes. 
Be it enacted by the Senate and House of Representa-
tives of the United States of America in Congress assembled, 
SECTION 1. SHORT TITLE. 
This Act may be cited as the ‘‘Understanding Cyber-
security of Mobile Networks Act’’. 
VerDate Sep 11 2014 
04:22 Jul 01, 2020
Jkt 099200
PO 00000
Frm 00001
Fmt 6652
Sfmt 6201
E:\BILLS\H7204.IH
H7204
pamtmann on DSKBC07HB2PROD with BILLS
SEC. 2. REPORT ON CYBERSECURITY OF MOBILE SERVICE 
NETWORKS. 
(a) IN GENERAL.—Not later than 1 year after the 
date of the enactment of this Act, the Assistant Secretary, 
in consultation with the Department of Homeland Secu-
rity, shall submit to Congress a report examining the cy-
bersecurity of mobile service networks and the vulner-
ability of such networks and mobile devices to cyberattacks 
and surveillance conducted by adversaries. 
(b) MATTERS TO BE INCLUDED.—The report re-
quired by subsection (a) shall include the following: 
(1) An assessment of the degree to which pro-
viders of mobile service have addressed, are address-
ing, 
or 
have 
not 
addressed 
cybersecurity 
vulnerabilities (including vulnerabilities the exploi-
tation of which could lead to surveillance conducted 
by adversaries) identified by academic and inde-
pendent researchers, multistakeholder standards and 
technical organizations, industry experts, and Fed-
eral agencies, including in relevant reports of— 
(A) the National Telecommunications and 
Information Administration; 
(B) the National Institute of Standards 
and Technology; and 
(C) the Department of Homeland Security, 
including— 
VerDate Sep 11 2014 
04:22 Jul 01, 2020
Jkt 099200
PO 00000
Frm 00002
Fmt 6652
Sfmt 6201
E:\BILLS\H7204.IH
H7204
pamtmann on DSKBC07HB2PROD with BILLS
(i) the Cybersecurity and Infrastruc-
ture Security Agency; and 
(ii) the Science and Technology Direc-
torate. 
(2) A discussion of— 
(A) the degree to which customers (includ-
ing consumers, companies, and government 
agencies) consider cybersecurity as a factor 
when considering the purchase of mobile serv-
ice; and 
(B) the commercial availability of tools, 
frameworks, best practices, and other resources 
for enabling such customers to evaluate risk 
and price tradeoffs. 
(3) A discussion of the degree to which pro-
viders of mobile service have implemented cybersecu-
rity best practices and risk assessment frameworks. 
(4) An estimate and discussion of the preva-
lence and efficacy of encryption and authentication 
algorithms and techniques used in each of the fol-
lowing: 
(A) Mobile service. 
(B) Mobile communications equipment or 
services. 
VerDate Sep 11 2014 
04:22 Jul 01, 2020
Jkt 099200
PO 00000
Frm 00003
Fmt 6652
Sfmt 6201
E:\BILLS\H7204.IH
H7204
pamtmann on DSKBC07HB2PROD with BILLS
(C) Commonly used mobile phones and 
other mobile devices. 
(D) Commonly used mobile operating sys-
tems and communications software and applica-
tions. 
(5) Barriers for providers of mobile service to 
adopt more efficacious encryption and authentication 
algorithms and techniques and to prohibit the use of 
older encryption and authentication algorithms and 
techniques with established vulnerabilities in mobile 
service, mobile communications equipment or serv-
ices, and mobile phones and other mobile devices. 
(6) The prevalence, usage, and availability of 
technologies that authenticate legitimate mobile 
service and mobile communications equipment or 
services to which mobile phones and other mobile de-
vices are connected. 
(7) The prevalence, costs, commercial avail-
ability, and usage by adversaries in the United 
States of cell site simulators (often known as inter-
national mobile subscriber identity-catchers) and 
other mobile service surveillance and interception 
technologies. 
VerDate Sep 11 2014 
04:22 Jul 01, 2020
Jkt 099200
PO 00000
Frm 00004
Fmt 6652
Sfmt 6201
E:\BILLS\H7204.IH
H7204
pamtmann on DSKBC07HB2PROD with BILLS
(c) CONSULTATION.—In preparing the report re-
quired by subsection (a), the Assistant Secretary shall, to 
the degree practicable, consult with— 
(1) the Commission; 
(2) the National Institute of Standards and 
Technology; 
(3) the intelligence community; 
(4) the Cybersecurity and Infrastructure Secu-
rity Agency of the Department of Homeland Secu-
rity; 
(5) the Science and Technology Directorate of 
the Department of Homeland Security; 
(6) academic and independent researchers with 
expertise in privacy, encryption, cybersecurity, and 
network threats; 
(7) participants in multistakeholder standards 
and technical organizations (including the 3rd Gen-
eration Partnership Project and the Internet Engi-
neering Task Force); 
(8) international stakeholders, in coordination 
with the Department of State as appropriate; 
(9) providers of mobile service; 
(10) manufacturers, operators, and providers of 
mobile communications equipment or services and 
mobile phones and other mobile devices; 
VerDate Sep 11 2014 
04:22 Jul 01, 2020
Jkt 099200
PO 00000
Frm 00005
Fmt 6652
Sfmt 6201
E:\BILLS\H7204.IH
H7204
pamtmann on DSKBC07HB2PROD with BILLS