Nvidia builds location verification tech that could help fight chip smuggling
Sign up now: Get ST's newsletters delivered to your inbox
Nvidia has built location verification technology that could indicate in which country its chips are operating.
PHOTO: REUTERS
SAN FRANCISCO - Nvidia has built location verification technology that could indicate which country its chips are operating in, the company confirmed on Dec 11, a move that could help prevent its artificial intelligence chips (AI) from being smuggled into countries where their export is banned.
The feature would be a software option that customers could install. It would tap into what are known as the confidential computing capabilities of its graphics processing units (GPUs).
The software was built to allow customers to track a chip’s overall computing performance – a common practice among companies that buy fleets of processors for large data centres – and would use the time delay in communicating with servers run by Nvidia to give a sense of the chip’s location on a par with what other internet-based services can provide, according to an Nvidia official.
In a blog post, Nvidia provided more details on how it would work, including that it plans to make it open-source, which would allow outside security researchers to examine it.
“We’re in the process of implementing a new software service that empowers data centre operators to monitor the health and inventory of their entire AI GPU fleet,” Nvidia said in a statement. “This customer-installed software agent leverages GPU telemetry to monitor fleet health, integrity and inventory.”
Nvidia on Dec 11 also said there are “no features that allow Nvidia to remotely control or take action on registered systems” and that the telemetry data sent to Nvidia servers is “read only”, meaning that the company’s servers cannot write data back to the chip.
“There is no feature within Nvidia GPUs that allow Nvidia or a remote actor to disable the Nvidia GPU,” Nvidia said. “There is no kill switch.”
The feature will first be made available on Nvidia’s latest Blackwell chips, but Nvidia is examining options for those prior generations, according to the Nvidia official.
If released, Nvidia’s location update could address calls from the White House and lawmakers from both major political parties in the US Congress for measures to prevent smuggling AI chips to China and other countries where their sale is restricted.
Those calls have intensified as the Department of Justice has brought criminal cases against China-connected smuggling rings that were allegedly attempting to bring more than US$160 million (S$207 million) worth of Nvidia chips to China.
But the calls for location verification in the US have also led China’s top cybersecurity regulator to call Nvidia in for questioning about whether its products contain backdoors that would allow the US to bypass its chips’ security features.
That regulatory cloud came to the fore again this week, after US President Donald Trump said he would allow exports of the Nvidia H200, the most immediate predecessor to its current flagship Blackwell chips, to China. Foreign policy experts expressed skepticism about whether China would allow companies there to purchase them.
Nvidia has strongly denied that its chips have backdoors. Software experts have said that it would be possible for Nvidia to build chip location verification without compromising the security of its offerings. REUTERS
