New JC-STAR Certification Regulations in Japan: Communication Equipment and Network Cameras Locked for STAR-3 Level, STAR-1 Becomes the Only Feasible Compliance Path


The Information Technology Promotion Agency (IPA) of Japan, in conjunction with the Ministry of Economy, Trade and Industry (METI), has officially released a specific standard for JC-STAR certification at the STAR-3 level for communication equipment (such as routers and switches) and network cameras. This standard explicitly requires that these two types of products must pass officially recognized third-party testing and evaluation to obtain the STAR-3 label, becoming a key credential for entering the mainstream Japanese market. However, the IPA has not yet opened STAR-3 external laboratory accreditation, and companies cannot apply directly.


I. Current Optimal Strategy: Focus on STAR-1 Certification to Seize the Opportunities in Both the Japanese and UK Markets


Given the lack of access to the STAR-3 testing channel, exporting companies should immediately shift to STAR-1 certification as the only feasible and high-value compliance path:


Japanese Market Access: STAR-1 is the unified baseline security requirement of the JC-STAR system. A label can be obtained through a company self-declaration and a professional test report, meeting basic market access requirements.


UK PSTI Mutual Recognition: From January 2026, products with the JC-STAR ★1 label can be exempted from repeated testing in the UK by submitting a supplementary application and supporting materials in English to the IPA, and directly included in the PSTI mutual recognition list. This allows for low-cost access to both major markets without repeated testing, providing a one-time breakthrough in both core markets.


STAR-1 Core Testing Requirements (Covering Both UK and Japan Compliance)


STAR-1 certification requires meeting 16 core security requirements. Key testing items include:


PSTI Mutual Recognition Core Three Elements (Universal Requirements in UK and Japan):


Strictly prohibit factory-preset universal default passwords; mandatory initialization and modification or a unique device password are required.


A channel for receiving vulnerability reports must be established and made public (PSTI requires an English interface).


The minimum period for providing security updates and support to products must be clearly stated to consumers.


High-Level Data Compliance in Japan:


≥90 days) to meet the audit and traceability requirements of the Japanese market.

评论

此博客中的热门博文

Power Bank Safety Upgrade: First Mandatory National Standard Issued

EN IEC 62680-1-3/62680-1-2 EU Electronics Standards

What is FDA Certification & What is FDA Registration?