The Information-Technology Promotion Agency, Japan (IPA) began issuing “★1 conformity labels” under the “Security Requirements Conformity Assessment and Labeling System (JC-STAR),” which began accepting applications on March 25th, and released the first “List of Products with Conformity Labels.”
With the release of products with “★1 conformity labels,” which indicate that they meet the “★1 security requirements” required for IoT products, not only government agencies and companies but also general consumers will be able to select and purchase safe and secure IoT products that meet security requirements by looking for the conformity labels. In response to the increasing cyber threats targeting vulnerabilities in IoT products, the Ministry of Economy, Trade and Industry announced the “Policy for Establishing a Security Conformity Assessment System for IoT Products” in August 2024. Based on this policy, the IPA began operating the “Security Requirements Conformity Assessment and Labeling System (JC-STAR)” on March 25th and has been accepting applications for ★1. The JC-STAR system’s ★1 (Level 1) defines the minimum security requirements commonly required for products, and IoT product vendors declare that they meet these requirements. This time, we have started issuing “★1 Compliance Labels” to IoT products that have completed the ★1 application verification process, and have released the first “List of Products with Compliance Labels”. As a result, products with “★1 Compliance Labels” that indicate that they meet the “★1 security requirements” required for IoT products will actually be released on the market. Of the applications submitted in the first month since the start of the ★1 Compliance Label application process, 26 applications from 11 companies (477 products based on product model numbers) have been issued with the ★1 Compliance Label by the 21st. In addition, 8 applications from 3 companies (12 products based on product model numbers) have been verified and accepted. In the future, applications for which the procedure for issuing the “★1 Compliance Label” has been completed will be added to the list of products with the Compliance Label below. The Compliance Label is a mark that indicates that the security functions that IoT products have in advance comply with the specified security requirements.
For IoT products that have acquired a compliance label, the label can be affixed to the product itself (casing), packaging, manuals, pamphlets, website, etc. The compliance label contains the level of the compliance label acquired by the IoT product, the registration number, and a two-dimensional code with an embedded URL for the “compliance label acquired product information page” managed by IPA to confirm the IoT product information. This product information page is prepared for each registration number. IPA will add IoT products that have completed the application confirmation process and have been issued a compliance label to the compliance label acquired product list as they arrive. In addition, IPA will carry out promotional activities to acquire a ★1 compliance label together with supporting industry groups. As for more advanced security compliance standards (★2 or higher) according to the characteristics of each IoT product type, the Compliance Standards Review Working Group is currently developing them for two product types, network cameras and communication devices, which are expected to be used in government procurement, and plans to start accepting ★2 or higher for the relevant product fields after January 2026. It plans to gradually develop ★2 or higher standards for other product types, such as ★2 for smart home-related devices, and expand the system.On the 21st, the Information-Technology Promotion Agency, Japan ( IPA ) began issuing “★1 conformity labels” under the “Security Conformity Assessment and Labeling System (JC-STAR),” which began accepting applications on March 25th, and published the first “List of Products with Conformity Labels.”
Also Read: Cybereason LLC appoints Hirotaka Sakurada as its CEO
The Ministry of Economy, Trade and Industry announced the “Policy for Establishing a Security Conformity Assessment System for IoT Products” in August 2024, and based on this policy, the IPA began operating the “Security Conformity Assessment and Labeling System (JC-STAR)” on March 25th and has been accepting applications for ★1. The JC-STAR system’s ★1 (Level 1) defines the minimum security requirements commonly required for products, and IoT product vendors declare that they meet these requirements. This time, the IPA has begun issuing “★1 conformity labels” to IoT products that have completed the ★1 application verification process, and published the first “List of Products with Conformity Labels.” As a result, products with the “★1 conformity label,” which indicates that they meet the “★1 security requirements” required for IoT products, will actually be released on the market. Of the applications submitted within about a month of the start of accepting applications for the “★1 Compliance Label,” 26 applications from 11 companies (477 products based on product model number) have already been issued with the “★1 Compliance Label” by the 21st. In addition, 8 applications from 3 companies (12 products based on product model number) have been approved after the verification process. Applications that have completed the issuance procedure for the “★1 Compliance Label” will be added to the list of products that have received the Compliance Label, as shown below. The Compliance Label is a mark that indicates that the security functions that IoT products are equipped with comply with the specified security requirements. IoT products that have received the Compliance Label can have the Compliance Label affixed to the product body (casing), package, manual, pamphlet, website, etc. In addition to the level of the Compliance Label and the registration number of the IoT product, the Compliance Label contains a two-dimensional code that contains the URL of the “Compliance Label Acquired Product Information Page” managed by IPA to check the IoT product information.
This product information page is prepared for each registration number. IPA will add IoT products that have completed the application confirmation process and been issued with a compliance label to the list of products that have received the compliance label as necessary. In addition, IPA will work with supporting industry groups and others to promote the acquisition of the ★1 compliance label . More advanced security compliance standards (★2 or higher) tailored to the characteristics of each IoT product type are being developed by the Compliance Standards Review Working Group for two product types, network cameras and communications devices, which are expected to be used in government procurement, and the IPA plans to start accepting ★2 or higher certifications for these product categories from January 2026 onwards. It is planned to gradually develop ★2 or higher standards for other product types, such as ★2 for smart home- related devices, and expand the system.
SOURCE: Yahoo
