Thought Leadership
The US communications authority FCC has introduced a new security certificate for networked consumer devices. The “U.S. Cyber Trust Mark” is intended to show consumers at a glance whether an IoT device meets basic security standards.
Manufacturers of smart consumer devices that qualify for the Cyber Trust Mark will soon be able to voluntarily affix a trademarked, unique logo to their products. The core of the program is a trust mark with a QR code, which users can use to call up detailed information on the security of the product. This includes information on the support period, the automation of security updates and instructions on secure configuration and changing preset passwords.
Wide range of certifiable devices
The certification program is aimed at manufacturers of a wide range of smart home products: From security cameras and voice-controlled shopping assistants to networked household appliances, fitness trackers and garage door openers, numerous device classes can receive the seal. Exceptions include FDA-regulated medical devices, motor vehicles, wired devices and industrial equipment.
Rigorous testing by accredited laboratories
To obtain the Cyber Trust Mark, manufacturers must have their products tested in FCC-approved test laboratories (CyberLABs). These laboratories check compliance with the safety requirements, which are based on the standards of the National Institute of Standards and Technology (NIST). After successful testing, manufacturers can apply for certification from an authorized label administrator.
Excluded from the program are products and companies that are on various government lists for security reasons – including the FCC’s “Covered List” and the Department of Commerce’s Entity List.
With the new certification program, the US government is responding to the growing security risks in the IoT sector. The seal is intended to make it easier for consumers to make purchasing decisions and at the same time motivate manufacturers to achieve higher security standards.
