Chinese State Media Details Specific Backdoor Allegations Against Nvidia's H20 Chips
Nvidia Corp. has pushed back against allegations from an influential Chinese state-affiliated media outlet that its H20 artificial intelligence chips, tailored for the China market, contain a “backdoor” that would allow for remote access and control.
The latest salvo in the U.S.-China tech rivalry came in a report published Aug. 10 by Yuyuan Tantian, a media arm of the state broadcaster China Central Television. The report detailed potential vulnerabilities in the H20 chip, which it claimed could enable functions such as location tracking and remote deactivation, tying these capabilities to U.S. government objectives.
In a direct response, the U.S. chipmaker stated that network security is “critically important” and that its products do not have such vulnerabilities. “Nvidia’s chips do not have ‘backdoors’ that would allow anyone to remotely access or control the chips,” the company said.
The public denial is Nvidia’s third on the issue since late July, when it was summoned by the Cyberspace Administration of China (CAC) over security risks related to the H20 chip. The escalating scrutiny from state media and regulators poses a significant challenge to Nvidia’s strategy of supplying China with processors that comply with U.S. export controls.
State Media Outlines Alleged Functions
The Yuyuan Tantian report alleges that the H20 chip could be designed with several "on-chip governance" mechanisms. These, it claims, are part of a systematic U.S. effort to maintain control over exported technology. The report suggests that cooperation in implementing such features could be a condition for U.S. companies to receive exemptions from export restrictions for "low-risk Chinese customers."
According to the outlet, the potential functions include:
- License Locking: The ability to halt the issuance of new licenses, rendering chips unable to receive essential updates and eventually become obsolete.
- Location Tracking: A system that determines a chip's approximate geographic location by measuring its response time to multiple landmark servers, potentially restricting its operation to specific areas.
- Usage Monitoring: Built-in hardware to record key information such as chip status, training tasks, and computational load to ensure usage complies with U.S. regulations.
- Use-Case Restriction: Limiting the chip’s deployment in large computing clusters and supercomputers, and ensuring it only runs approved code or models to protect sensitive data.
Nvidia’s Denial and Regulatory Scrutiny
Nvidia has consistently refuted these claims. The company’s latest statement reiterates its position following a July 31 meeting with the CAC, which addressed potential security loopholes and backdoor risks in the H20 series.
The Yuyuan Tantian report noted that Nvidia’s denials need to be substantiated with “further action.” This aligns with the position of Chinese regulators, as the CAC reportedly requested that the company submit “relevant certification materials” to prove its chips are secure. The repeated allegations from state-affiliated media place further pressure on Nvidia to provide concrete evidence to assuage concerns in its key market.
A Challenge to a Critical Market
The controversy strikes at the heart of Nvidia's China strategy. The H20 GPU was specifically developed as a workaround to tightening U.S. export controls that have cut off Chinese firms' access to the company’s most advanced AI accelerators.
The state media report concluded by labeling the H20 as neither "safe," "green," nor "advanced," and pointedly stated that "as consumers, we can of course choose not to buy." This rhetoric signals a potential headwind for the H20's adoption in China, threatening Nvidia's sales in a market it has sought to retain despite geopolitical tensions.