The safety test standard ETSI EN 303 645, which was already published in mid-2021, is intended to ensure more uniformity of safety standards for IoT devices, especially on the European market. The test standard is a recommendation to manufacturers and addresses all networked consumer IoT devices, especially in the Smart Home sector.
The security standard is intended to enable manufacturers to develop secure IoT devices from the very beginning – security by design. In addition, the standard is to function as an internationally recognised benchmark to determine whether IoT devices have a minimum level of cyber security. The following areas, among others, are to be covered: Authentication, software update mechanisms, secure communication and data protection.
Test specification ETSI TS 103 701
The test specification serves as a framework for the conformity assessment of the new standard and extends the standard with test cases. The test specification ETSI TS 103 701 has now been published by the European standardisation organisation ETSI (European Telecommunications Standards Institute).
TS 103 701 is intended to guarantee that safety characteristics and the results of their testing are comparable. In this way, manufacturers and test centres are enabled to carry out a uniform security assessment.
Basis for German IT Security Label
The recently published test specification can also serve as the basis for the planned German IT Security Label. This label is intended to inform consumers about the security functions of a product or service.
Manufacturers can then declare their products compliant with the standard and apply to the German Federal Office for Information Security (BSI) for a corresponding label. The IT security mark is intended to provide more transparency in the security of products in the future. Based on the manufacturer’s declaration that the security requirements are met, products and services will be labelled accordingly.
At the Internet Security Days 2021 from 15 to 17 September, the eco Association will also address the topic of “Standards for more security in the IoT” in a panel discussion. Together with Graziano Galante (Microsoft IoT & MR Sales Team), Michael Lemke (Huawei Technologies Deutschland GmbH) and Olaf Pursche (AV-TEST Institute), we want to discuss and see how such standards can actually provide more security in the Internet of Things.