Chinese Lidar Security Probe Puts US Vehicle Supply Chain Under Scrutiny
Idaho National Laboratory is probing Chinese lidar security as Congress weighs bans amid espionage, disruption and supply chain risks for US vehicles.
Summary
Idaho National Laboratory, part of the Department of Energy, is examining Chinese vehicle lidar cybersecurity, according to two anonymous sources. An unidentified electric or autonomous vehicle company or group funds the work, which sources said might clear the technology. Rivian, General Motors, Ford, Kodiak, Lucid Motors, Nuro and Uber said they were unaware; Nvidia, Zoox and Aurora did not answer. The lab declined comment in June and July, and suppliers Hesai and RoboSense did not respond.
As Congress weighs multiple bans, Senators Tammy Baldwin and Ted Budd’s Securing Infrastructure from Adversaries Act addresses taxpayer purchases and military or industrial espionage. Representatives Raja Krishnamoorthi and John Moolenaar back another bill; Moolenaar warned of back doors sending data to Chinese Communist interests. Innoviz CEO and co-founder Omer Keilaf, a seven-year Israeli intelligence veteran, cited Chinese supply dependence and two cyber threats: remotely disabling sensors to stop or brick vehicles, and compressing surroundings data for cellular transmission. Lasers have disabled units, but no method for attacking robotaxi fleets is established.
Chinese scale and cheaper labor and capital cut lidar prices from up to $75,000 a decade ago to a few hundred dollars, driving US consolidation and Luminar’s bankruptcy. Tesla favors cameras, but US vehicle developers are considering Chinese sensors. Rivian plans roof lidar on an R2 version; CEO RJ Scaringe told Reuters in March it was discussing US or non-China production with lidar companies and automakers, although its CFO rejected in-house development. Chinese lidar remains legal: the Department of Commerce’s 2025 rule bars Chinese connectivity hardware in US passenger cars, not autonomous sensors; the Department of Defense’s 1260H list labels Hesai and RoboSense alleged People’s Liberation Army supporters, limiting military work. In early 2024, a leap-year error stopped Hesai-equipped autonomous vehicles for one day, demonstrating disruption without an attack.
Positives
- Idaho National Laboratory’s industry-funded review could clarify whether Chinese lidar contains exploitable cybersecurity flaws.
- Lidar prices have fallen from as much as $75,000 a decade ago to a few hundred dollars through Chinese manufacturing scale.
- Rivian has discussed building lidar capacity in the United States or outside China with suppliers and other automakers.
- The Department of Commerce’s 2025 vehicle rule already blocks Chinese connectivity hardware, providing a possible regulatory model for autonomous sensors.
Risks & concerns
- Hesai’s early 2024 leap-year error stopped lidar-equipped autonomous vehicles for an entire day.
- Omer Keilaf warned that compromised lidar could stop moving vehicles, brick parked ones or transmit compressed environmental data.
- Hesai and RoboSense face military work restrictions after placement on the Department of Defense’s 1260H list.
- US lidar makers have consolidated, while Luminar filed for bankruptcy as Chinese suppliers benefited from lower labor, capital and manufacturing costs.
- The Idaho National Laboratory review’s industry sponsors remain unidentified, and the laboratory declined to discuss the project.