Japan’s strategy to combat spam

1. 4 May, 2005 Japan’s strategy to combat spam Toshihiko SHIBUYA Deputy Director, Telecommunications Consumer Policy Division, Telecommunications Bureau, Ministry of Internal Affairs and Communications (MIC), Japan

2. Characteristics of spamin Japan are … (1) Mobiles (2) Dating Sites

3. １. Media Characteristics of spam in Japan ２. Content of spam Adult sites Source: Survey by Japan Computer Communications Association, the first half of FY 2004

4. i • From：XXX@XXX • To：XXX@XXX • Re: …………………. From：XXX@XXX To：XXX@XXX Re: …………………. SMS (in mobile carrier network) Internet What is “Mobile spam” in Japan? Receiver Sender The word “Mobile spam” includes not only SMS, but also e-mails sent to mobiles by means of the Internet.

5. Mobile Usage in Japan ・Calling・Taking Pictures・Playing Games・Web browsing・Sending/Receiving e-mails Most Japanese (particularly youngsters) use mobiles as mailing tools rather than phones mainly because sending an e-mail is cheaper than making a call. ex) NTT DoCoMo Calling rates: 90 yen（about $0.82） for 3 minutes Sending e-mail rates: 4.2 yen（about $0.04） for 250 Japanese characters

6. 5,114 4,153 5 750 Transition in Mobile phone use and Mobile Internet Subscribers （10 thousand contracts） 8,152 Number of mobile phone subscribers 7,565 8000 7000 6000 5000 4000 3000 2000 1000 0 includes Mobile Internet subscribers 6,912 6,973 6,094 6,246 5,193 3,457 1999.32000.32001.32002.3 2003.3 2004.3

7. Japan Currently Enjoys a Major Lead in Mobile Internet ◇The number of mobile Internet contracts has jumped to more than 67 million in only 4.5 years. ◇Internet compatibility with mobile phones in Japan stands at 80%. The world leader in this area. Mobile phone Internet compatibility rate in the main countries (as of September 2002) (Ratio of mobile Internet contracts as a percentage of total mobile telephone contracts). Changes in the number of mobile phone subscribers Number 1 in the world for Internet compatibility with mobile phones (%) Created by documents from Baskerville Communications MCI Survey

8. 2001 Spam sent “to mobiles” significantly increased →Self-regulation by mobile operators Administrative guidance by Government to implement new measures 2002 Two Laws were enacted →The Law on Regulation of Transmission of Specified Electronic Mail (Anti- spam Law) & Specified Commercial Transactions Law (For PC spam as well as Mobile spam) 2003Spread of Domain-Designation Service (to Block PC spam) Spam sent “from mobiles” increased →Self-regulation (e.g. suspension of service for spammers) by mobile operators Promotion of self-regulation by Government (・・・and decreased) History of spam in Japan (1)

9. 2004 Spam (mainly sent “from PCs” to mobiles) is still a serious problem → Spam from overseas is increasing (from US, China, Korea, etc.) → Anti-Spam Law stipulates that the Government have to consider whether it should be amended or not within three years of its enforcement (→ by the end of June 2005). → MIC set up a Study Group on a framework to handle spam on October 7, 2004. 2005 Amendment of Anti-Spam Law is discussed → On the basis of discussions during the Study Group, an amendment bill to the Anti-Spam Law including the introduction of direct penalties was submitted to the Diet in March 2005. History of spam in Japan (2)

10. Five points discussed during Study Group meeting 1. Effective enforcement by Government 2. Self-regulation by the private sector 3. Developing technologies 4. Enhancing awareness 5. Seeking international cooperation Japan’s strategy to combat spam

11. 1. Effective enforcement by Government

12. Outline of “The Law on Regulation of Transmission of Specified Electronic Mail”（Anti-spam Law） Opt-out Transmission of specified electronic mail (unsolicited advertisement mail) to a person who has indicated he/she does not wish to receive such mail is prohibited. Labeling Labeling obligations for senders of specified electronic mail ①Identified as specified electronic mail（Label ”未承諾広告※”） ②Sender’s Name/address ③ Sender’s E-mail Address ④ Opt-out E-mail Address Penalties ・ Administrative Orders by Minister to uphold the law ・ Fines up to 500,000 yen ($5,000) assessed on failure to observe Administrative Orders Others ・ Prohibition of mail transmission utilizing any program that generates random fictitious e-mail addresses ・ Telecommunications carriers are authorized not to provide e-mail transmission services if the e-mails include random fictitious addresses.

13. Possible amendment of Anti-spam Law discussed during Study Group meeting 1. Expanding the areas covered by the Anti-Spam Law - Currently, e-mails only sent to private-use addresses are covered by law. => Include e-mails sent to business-use addresses 2. Widening the scope of prohibited areas to fictitious addresses - Currently, sending only “advertisement” e-mails to fictitious addresses is banned. => Include blank e-mails which attempt to obtain active addresses or disguised e-mails, such as apparently from friends 3. Introduction of Direct Penalties on malicious spammers - Currently, we adopt a “two-step punishment” for illegal spammers. The first step isan “Administrative Order” by the Minister and the second step is the imposition of a fine. => Direct penalties (fine of up to one million-yen or one year imprisonment) on malicious spammers who disguise their information such as e-mail addresses

14. 2. Self-regulation by private sector (…and Government’s promotion)

15. Promotion of self-regulation in 2003～ November 2003 Establishment of “Working Group against Spam” composed of all mobile operators in Japan (6 groups) and MIC Request that all mobile operators adopt uniform countermeasures to shut out spammers (sent “from Mobiles”) 1. Suspension of service for spammers ２. Limitation on the number of e-mails from mobiles ‐Making mobile users more aware of spam issues in collaboration with WG members

16. Data on countermeasures taken by mobile operators Number of suspended lines NTT DoCoMo 3,536 as of 2 Mar, 2005 KDDI (au) 41,600 as of 31 Mar, 2005 Vodafone 20,200 as of 2 Mar, 2005 Limitation on the number of e-mails sent from mobiles NTT DoCoMo The number of e-mails that can be sent per line per day is limited to less than 1,000. （20 October, 2003） → Limited to less than 200 （8 January, 2004） KDDI (au) Suspension of services for senders （lines） who send more than 1,000 mails a day. （18 September, 2003） The number of e-mails that can be sent per line per day is limited to less than 1,000. （23 August, 2004） Vodafone The number of e-mails that can be sent per three hours is limited to less than 120. （22 December, 2003）

17. Suspension of service for “spammers” What is a “spammer” (for mobile operators) ? Illegal sender (e.g. Violation of labeling obligation) Legislation of anti-spam law facilitated Mobile operators’ self-regulation.

18. Trend in the amount of spam sent “from mobiles” Dramatically decreased due to the cooperation of Mobile Operators and Government 2005 2003 2004 Source: Survey by Japan Computer Communications Association (Sample–based survey using monitoring terminals)

19. Trend in number of reports to Research and Consulting Center for Spam Spam is still a serious problem!! >>> Next target is ISPs!! 2003 2004 2005 ※ Research and Consulting Center for Spam was established by the Japan Computer Communications Association on 10 July 2002.

20. With respect to mobile spam, in particular sent from mobiles, a joint initiative of the government and mobile operators to combat mobile spam has succeeded. The next step is how Governments and ISPs can cooperate to combat spam!!

21. 5. Suspension ISPs Spam Blocking Support Project spam Japan Computer Communications Association spammer MIC 4. Provide information on illegal spam Monitors ③ Confirm illegality 1. Analyse headers of spam received by monitor terminals and detect ISPs that spammers used 2. Report Schedule February 2005Test May 2005 Actual Start-up

22. 3. Developing Technologies

23. Image of Authentication Authentication server From:xx@nifty.com To:xxx@xx.jp Inquires whether senders ID is genuine or not Legitimate mail nifty.com Receive only legitimate mail Disguised mail Mail server Mail server disguise！ From:xxx@yahoo.jp To:xxx@xx.jp

24. Mobile and Authentication technology Impossible to disguise (No function to change sender’s name) Easy to disguise Mobile operators do not need to adopt Authentication technology as “senders”, but they need to do so as “receivers” of disguised spam !

25. > Promotion of Filtering Services > Introduction of Authentication Technology > Port 25 blocking … MIC needs to clarify the legality of the above in relation to Secrecy of Communications (privacy), freedom of expressions, etc. provided in the Telecommunications Business Law. (and encourage technological solutions)

26. 4. Enhancing Awareness

27. Understandable, Multi-sided and Effective “Awareness” is truly important. > Pamphlet, Website, etc. by many participants

28. 5. Seeking International Cooperation

29. Spam is borderless. First of all, “national legislation” is essential. Then, “International Cooperation” is necessary to combat spam.

30. <Multilateral> • OECD (Spam Task Force, London Action Plan, etc.) • ITU (WSIS) • ASEM (“Joint statement on International Anti-Spam • Cooperation, February 2005) • “Seoul-Melbourne Multilateral MoU” • <“first step” to international cooperation on spam> • <Bilateral> • MIC holds several bilateral meetings with EU, UK, • France, Germany, Italy, etc.

31. We Look Forward to Cooperating with You!!