Welcome Inspire Pilots!
Join our free DJI Inspire community today!
Sign up

DJI Data Security – Protecting Customers’ Private Information

Joined
May 1, 2015
Messages
1,512
Reaction score
684
Location
Los Angeles, CA
Website
www.advexure.com
DJI Owners, Operators, and Users –

DJI recognizes that users of electronic devices are increasingly concerned about the security of their private data, and many people have asked us how DJI products protect the photos, videos, and other information our customers generate. DJI has released

DJI recognizes that users of electronic devices are increasingly concerned about the security of their private data, and many people have asked us how DJI products protect the photos, videos, and other information our customers generate. We are releasing this statement to help answer those questions.

DJI Gives Users Control

DJI is committed to helping our customers protect their data. Wherever possible, we design our products to give customers control over their data, including if, when, and how that information is collected, transmitted, or shared.

By default, DJI drones do not automatically transmit most types of user data without user authorization, including media files (photos and videos) and flight logs (detailed telemetry and location information compiled during the flight). Users can choose whether to share most types of data collected by DJI products within the DJI GO App, available for both Android and iOS. For example, a user must affirmatively choose to share media files or flight logs.

DJI drones are capable of collecting different types of data, together with DJI’s flight control apps, such as DJI GO and DJI GO 4. These flight control apps augment the drone’s physical remote controller to provide users with better control of the drone. Most of DJI’s drone remote controllers do not have a video display, and so the flight control app, running on the customer’s mobile device, provides a live video feed and other advanced controls when paired with the DJI remote controller. The flight control app is the only part of a DJI product that has the ability to connect to the internet. Other software developers have created flight control, photography, and mapping apps for DJI drones, and our customers have the choice to use those as alternatives to DJI’s flight control apps.

Within our flight control apps, users can choose whether to share most types of data collected by DJI products:​
  • Photography/Videography Data includes photos and video recorded by the drone’s main camera sensors. This data is stored on board the drone in an SD card. The user may also choose to save lower-resolution versions of the photography/videography data locally within the flight control app on the user’s mobile device. The flight control app does not automatically transmit any photography/videography data to DJI servers. Instead, each time a user wants to share this data, the user must manually turn on the sharing feature.​
  • Telemetry Data refers to data recorded regarding a drone’s flight, including altitude, speed, distance, location (e.g., GPS coordinates). Telemetry data also includes a log of the user’s control stick operation, which can be used for diagnostic purposes. In the DJI flight control app, this telemetry data is compiled into one log per flight called the “Flight Record.” This data is first generated in the drone and the remote controller, and it is constantly transmitted to the mobile device connected to the remote controller, which communicates with the drone. After receiving this telemetry data, the mobile device stores the data locally as part of the flight control app. The flight control app does not automatically transmit telemetry data to DJI servers. To synchronize this telemetry data to DJI’s servers for backup purposes, the user must manually use the “Sync” button on the DJI GO interface. One purpose of this “Sync” function is to allow DJI’s aftersales service personnel to analyze a user’s flight history in order to determine causes of drone malfunctions or crashes. Another is to provide a backup mechanism for our users who need to maintain flight records, as well as to allow a single user account to be used with a common set of flight logs across multiple mobile devices.​
  • Obstacle Avoidance Data is recorded by the obstacle avoidance image sensors (e.g., the two “eyes” at the front of Mavic or Phantom 4). This feature helps to protect buildings, people, and animals from drone collisions. This type of imaging data is limited to low resolution video, with no audio. Like telemetry data, DJI sometimes analyzes obstacle avoidance data to determine causes of drone malfunctions or crashes. The flight control app does not automatically transmit obstacle avoidance data to DJI servers. Obstacle avoidance data may only be transmitted in response to manual triggering in the flight control app. The flight control app does not permit automatic transmission of obstacle avoidance data.​

There are three types of user data that DJI flight control apps do automatically transmit by default when connected to the internet. These transmissions can, of course, be avoided by operating the drone using a mobile device, such as a tablet, that is not connected to the internet. For two of these three data types, the user may also individually deactivate transmission within the DJI GO app settings:​
  • App Performance Data is collected and sent to DJI to report bugs or usage statistics. This data is collected to improve the performance of DJI apps, including errors or commonly used features. Major app developers collect and utilize similar data. All app usage data is collected and presented in aggregate—with no ability for DJI to identify individual users or their use patterns. The user may choose to deactivate transmission of this data in the DJI GO app settings.​
  • User Experience Data refers to more basic information about the drone’s usage, including times of flight, flight duration, flight distance, average number of pictures taken per flight, distribution of flight attitudes, etc. (e.g., just “this Phantom 4 flew 30 minutes over 6km and took 23 photos”). This data is qualitatively different from the Flight Record data because it does not indicate precise GPS coordinates or altitude of each flight, or associate that kind of data with a specific user. The user may choose to deactivate transmission of this data in the flight control app settings.​
  • Location Check Data is collected by DJI drones and used to determine the location where the drone is operating based on GPS data, IP address, and/or mobile network ID (MCC ID). Historically, the GO app has transmitted Location Check Data to DJI servers for two important purposes that are crucial to the safe and compliant operation of our products:​
  • To update location-specific geofencing flight limitations and warnings such as in restricted airspace, temporary flight restrictions or no fly zones (NFZs), as may be implemented by governments including the US government. This location data is designed to meet important safety and security needs while also respecting the privacy rights of people and businesses who use our products. Policymakers in Washington, Brussels, and elsewhere have emphasized the safety contributions of geofencing technologies, and we are proud to have the most robust geofencing system on the market. Airspace restrictions and the status of ground facilities change over time, which is why we need to check each drone’s location in order for the user to obtain updated information for the surrounding area prior to flight. We have used this mechanism to provide protection from wayward drones at such events as the Olympic Games in Brazil, the G7 summit in Japan, the Super Bowl in the United States, and the firefighting efforts in California.​
  • To determine the country in which the drone is operating in order to comply with local laws. Different countries have different radio regulations, such as restrictions on spectrum use (e.g., 2.4GHz versus 5GHz WiFi). DJI’s drone hardware is not customized for each country at the time of manufacturing. Instead, DJI’s software enables each drone to modify or disable features in order to comply with local regulations.​

DJI has engaged Kivu Consulting, a leading computer forensics and investigation firm headquartered in San Francisco, to conduct an independent analysis of how our drone products collect, store, and transmit different types of data. Kivu’s analysis is ongoing, but its preliminary conclusions confirm all of the above information, including the core fact that DJI gives users control over data transmissions.

Please read more at DJI.com...​

Should DJI owners, operators and enterprise users have any questions or would like to speak regarding their data security concerns in DJI product use, please email [email protected], speak with your DJI Authorized Enterprise Dealer, or email [email protected].

Safe flying,
The Advexure Team
 
DJI recognizes that users of electronic devices are increasingly concerned about the security of their private data

DJI has gotten themselves in a bit of a bind with all of the earned bad press about how they have mishandled user data.

I doubt a couple of press releases is going to make any difference. Especially when given every opportunity, they seemingly continue to do everything they can to be non-transparent.

To their credit, they probably didn't intend harm. It's just their national culture to place little to no importance on personal privacy. Performing on the big stage sometimes comes with a wake up call. They don't have any serious competition yet so they may be okay. If they did, it might be a different story.

Nothing against you dealers. You didn't do it.
 
DJI Owners, Operators, and Users –

DJI recognizes that users of electronic devices are increasingly concerned about the security of their private data, and many people have asked us how DJI products protect the photos, videos, and other information our customers generate. DJI has released

DJI recognizes that users of electronic devices are increasingly concerned about the security of their private data, and many people have asked us how DJI products protect the photos, videos, and other information our customers generate. We are releasing this statement to help answer those questions.

DJI Gives Users Control

DJI is committed to helping our customers protect their data. Wherever possible, we design our products to give customers control over their data, including if, when, and how that information is collected, transmitted, or shared.

By default, DJI drones do not automatically transmit most types of user data without user authorization, including media files (photos and videos) and flight logs (detailed telemetry and location information compiled during the flight). Users can choose whether to share most types of data collected by DJI products within the DJI GO App, available for both Android and iOS. For example, a user must affirmatively choose to share media files or flight logs.

DJI drones are capable of collecting different types of data, together with DJI’s flight control apps, such as DJI GO and DJI GO 4. These flight control apps augment the drone’s physical remote controller to provide users with better control of the drone. Most of DJI’s drone remote controllers do not have a video display, and so the flight control app, running on the customer’s mobile device, provides a live video feed and other advanced controls when paired with the DJI remote controller. The flight control app is the only part of a DJI product that has the ability to connect to the internet. Other software developers have created flight control, photography, and mapping apps for DJI drones, and our customers have the choice to use those as alternatives to DJI’s flight control apps.

Within our flight control apps, users can choose whether to share most types of data collected by DJI products:​
  • Photography/Videography Data includes photos and video recorded by the drone’s main camera sensors. This data is stored on board the drone in an SD card. The user may also choose to save lower-resolution versions of the photography/videography data locally within the flight control app on the user’s mobile device. The flight control app does not automatically transmit any photography/videography data to DJI servers. Instead, each time a user wants to share this data, the user must manually turn on the sharing feature.​
  • Telemetry Data refers to data recorded regarding a drone’s flight, including altitude, speed, distance, location (e.g., GPS coordinates). Telemetry data also includes a log of the user’s control stick operation, which can be used for diagnostic purposes. In the DJI flight control app, this telemetry data is compiled into one log per flight called the “Flight Record.” This data is first generated in the drone and the remote controller, and it is constantly transmitted to the mobile device connected to the remote controller, which communicates with the drone. After receiving this telemetry data, the mobile device stores the data locally as part of the flight control app. The flight control app does not automatically transmit telemetry data to DJI servers. To synchronize this telemetry data to DJI’s servers for backup purposes, the user must manually use the “Sync” button on the DJI GO interface. One purpose of this “Sync” function is to allow DJI’s aftersales service personnel to analyze a user’s flight history in order to determine causes of drone malfunctions or crashes. Another is to provide a backup mechanism for our users who need to maintain flight records, as well as to allow a single user account to be used with a common set of flight logs across multiple mobile devices.​
  • Obstacle Avoidance Data is recorded by the obstacle avoidance image sensors (e.g., the two “eyes” at the front of Mavic or Phantom 4). This feature helps to protect buildings, people, and animals from drone collisions. This type of imaging data is limited to low resolution video, with no audio. Like telemetry data, DJI sometimes analyzes obstacle avoidance data to determine causes of drone malfunctions or crashes. The flight control app does not automatically transmit obstacle avoidance data to DJI servers. Obstacle avoidance data may only be transmitted in response to manual triggering in the flight control app. The flight control app does not permit automatic transmission of obstacle avoidance data.​
There are three types of user data that DJI flight control apps do automatically transmit by default when connected to the internet. These transmissions can, of course, be avoided by operating the drone using a mobile device, such as a tablet, that is not connected to the internet. For two of these three data types, the user may also individually deactivate transmission within the DJI GO app settings:​
  • App Performance Data is collected and sent to DJI to report bugs or usage statistics. This data is collected to improve the performance of DJI apps, including errors or commonly used features. Major app developers collect and utilize similar data. All app usage data is collected and presented in aggregate—with no ability for DJI to identify individual users or their use patterns. The user may choose to deactivate transmission of this data in the DJI GO app settings.​
  • User Experience Data refers to more basic information about the drone’s usage, including times of flight, flight duration, flight distance, average number of pictures taken per flight, distribution of flight attitudes, etc. (e.g., just “this Phantom 4 flew 30 minutes over 6km and took 23 photos”). This data is qualitatively different from the Flight Record data because it does not indicate precise GPS coordinates or altitude of each flight, or associate that kind of data with a specific user. The user may choose to deactivate transmission of this data in the flight control app settings.​
  • Location Check Data is collected by DJI drones and used to determine the location where the drone is operating based on GPS data, IP address, and/or mobile network ID (MCC ID). Historically, the GO app has transmitted Location Check Data to DJI servers for two important purposes that are crucial to the safe and compliant operation of our products:​
  • To update location-specific geofencing flight limitations and warnings such as in restricted airspace, temporary flight restrictions or no fly zones (NFZs), as may be implemented by governments including the US government. This location data is designed to meet important safety and security needs while also respecting the privacy rights of people and businesses who use our products. Policymakers in Washington, Brussels, and elsewhere have emphasized the safety contributions of geofencing technologies, and we are proud to have the most robust geofencing system on the market. Airspace restrictions and the status of ground facilities change over time, which is why we need to check each drone’s location in order for the user to obtain updated information for the surrounding area prior to flight. We have used this mechanism to provide protection from wayward drones at such events as the Olympic Games in Brazil, the G7 summit in Japan, the Super Bowl in the United States, and the firefighting efforts in California.​
  • To determine the country in which the drone is operating in order to comply with local laws. Different countries have different radio regulations, such as restrictions on spectrum use (e.g., 2.4GHz versus 5GHz WiFi). DJI’s drone hardware is not customized for each country at the time of manufacturing. Instead, DJI’s software enables each drone to modify or disable features in order to comply with local regulations.​
DJI has engaged Kivu Consulting, a leading computer forensics and investigation firm headquartered in San Francisco, to conduct an independent analysis of how our drone products collect, store, and transmit different types of data. Kivu’s analysis is ongoing, but its preliminary conclusions confirm all of the above information, including the core fact that DJI gives users control over data transmissions.

Please read more at DJI.com...​

Should DJI owners, operators and enterprise users have any questions or would like to speak regarding their data security concerns in DJI product use, please email [email protected], speak with your DJI Authorized Enterprise Dealer, or email [email protected].

Safe flying,
The Advexure Team
How can I "disable the internet"?
 
  • Like
Reactions: slim.slamma

Members online

No members online now.

Forum statistics

Threads
22,333
Messages
210,838
Members
34,921
Latest member
DellAlcock