PLA-linked Chinese university bought Nvidia H200 chips despite US blacklist, records show
By
Reuters
asserted
records → link → blacklist
A Chinese university with deep ties to the People’s Liberation Army bought Nvidia’s powerful H200 AI chips last month despite being on a US export blacklist, procurement records show, highlighting gaps in Washington’s efforts to curb China’s access to advanced technology.
asserted
records → buy → technology
The findings come as Nvidia and its CEO Jensen Huang face mounting scrutiny in Washington over his lobbying for looser restrictions on sales of AI chips to China, following reports alleging he was targeted by a Chinese spying operation.
asserted
he → come → operation
Huang has argued that continued US sales to China would preserve American technological leadership and keep Chinese customers reliant on US technology.
asserted
sales → argue → technology
Both Democrats and Republicans in Congress have urged stronger controls on China’s access to advanced AI chips, such as chip-tracking requirements and greater congressional oversight of exports.
asserted
Democrats → urge → exports
Three Republican congressional committee chairmen have requested a briefing with Huang on November 18 over his reported contacts with an alleged Chinese intelligence operative.
Northwestern Polytechnical University, a member of China’s “Seven Sons of National Defense” group of elite defense-focused universities, bought two H200 chips last month for 874,700 yuan ($123,000), according to an October 21 procurement record on its website.
uncertain
University → request → website
The chips were purchased for its management school from Shaanxi Bosuan Network Technology rather than directly from Nvidia, the record shows.
asserted
record → purchase → Nvidia
The H200 is among Nvidia’s most capable chips for training and running advanced AI systems and is subject to US export license approvals, which are normally denied for blacklisted institutions such as Northwestern Polytechnical.
asserted
which → train → Polytechnical
Northwestern Polytechnical also bought access this year to H200 chips and other powerful Nvidia AI processors through five contracts for rented computing capacity from Chinese companies, procurement records show.
asserted
records → buy → companies
Reuters is reporting the chip purchases and computing contracts for the first time.
asserted
Reuters → report → time
Northwestern Polytechnical, Nvidia and the US Commerce Department’s Bureau of Industry and Security, which oversees export controls, did not respond to requests for comment.
asserted
which → oversee → comment
Reuters could not determine contact details for Shaanxi Bosuan Network Technology.
uncertain
Reuters → determine → Technology
TRADE BLACKLIST
Based in the northwestern city of Xi’an, Northwestern Polytechnical conducts research related to military aircraft, missiles and satellites.
asserted
Polytechnical → base → aircraft
The US Commerce Department added the university to its trade blacklist, known as the Entity List, in 2001 over its alleged involvement in missile-proliferation activities and military research.
asserted
Department → add → activities
It tightened the restrictions in 2019, making licenses for exports of controlled US technology to the university subject to a policy of denial in most circumstances.
asserted
licenses → tighten → circumstances
Northwestern Polytechnical’s purchases show how Chinese institutions with military ties continue to obtain US AI computing power through domestic suppliers, either by buying chips outright or renting access to servers containing them.
asserted
institutions → show → them
A Reuters review of 26 Chinese procurement and corporate records from this year found universities and research institutions buying US-restricted Nvidia chips or renting access to Nvidia-powered computing services that use such chips through domestic suppliers.
asserted
that → find → suppliers
Several had close links to China’s defense industry or military research.
asserted
Several → have → industry
The universities named in the records did not respond to requests for comment.
asserted
universities → name → comment
NVIDIA CHIPS FOR MILITARY-LINKED RESEARCH
US President Donald Trump’s administration began allowing some H200 exports to China on a case-by-case basis in January.
asserted
administration → link → January
But that policy did not lift the separate restrictions applying to Entity List organizations such as Northwestern Polytechnical.
asserted
policy → lift → Polytechnical
The January licensing rules also require safeguards to prevent blacklisted entities and military end-users from remotely accessing chips exported under the policy, which covers H200 processors and less advanced models.
asserted
which → require → processors
In addition to the management school’s outright purchase of the two H200 chips, procurement records show the university’s cybersecurity school awarded two seven-month contracts in January for access to servers containing eight H200 chips each.
asserted
school → show → chips
The contracts, worth 441,700 yuan and 441,000 yuan, covered fine-tuning AI models and reinforcement-learning training.
asserted
contracts → cover → models
It also rented access to servers containing eight Nvidia A100 chips and eight A800 chips.
asserted
It → rent → chips
The A100 and A800 are banned from export to all Chinese entities, though the H200 is the most advanced of those cited in Northwestern Polytechnical’s procurement records.
asserted
H200 → ban → records
In April, another university institute bought computing services requiring at least 24 A100 chips in a 375,000 yuan contract for structural and fluid-dynamics simulations.
asserted
institute → buy → simulations
The awards went to several little-known Chinese technology suppliers.
asserted
awards → go → suppliers
The records offered scant information about where the processors originated or where the rented servers operated.
asserted
servers → offer → information
Under Chinese law, public procurement agencies must verify that suppliers can fulfill orders before announcing winning bidders and signing contracts.
asserted
suppliers → verify → contracts
A WIDER MARKET
The procurement records show a wider market for restricted Nvidia AI chips and computing services at Chinese universities.
asserted
records → show → universities
Shenzhen University bought three H100 processors, another high-end Nvidia AI chip banned by the US, for 769,800 yuan in September.
asserted
University → buy → September
Wuhan University of Technology bought a server containing an H100 chip for 355,000 yuan in June and four A100 chips in a separate 344,000 yuan purchase, the records show.
asserted
records → buy → purchase
Beihang University, another of the Seven Sons of National Defense universities, bought four A800 processors for 489,000 yuan in April.
asserted
University → buy → April
Beihang has close ties to China’s aerospace and defense industries and conducts research for military aviation and space programs.
asserted
Beihang → have → programs
Two government procurement announcements in July and September named suppliers selected to provide computing services using Nvidia H800 and A800 chips restricted from export to China to the University of Chinese Academy of Sciences.
asserted
announcements → name → Sciences
One listed H800 access at 10 yuan per chip-hour.
asserted
One → list → hour
A separate January procurement award named a supplier of six A100 chips worth 484,800 yuan for a Shenzhen-based public institution.
asserted
award → name → institution
Reuters has previously reported that Chinese institutions acquired restricted Nvidia chips embedded in servers made by Super Micro Computer, Dell and Gigabyte through domestic resellers.
asserted
institutions → report → resellers
Reuters has also documented an underground market in China for restricted Nvidia chips sourced from overseas inventories and third-country intermediaries.
asserted
Reuters → document → inventories
…and 1 more, not listed.
The Aporia
