EN 18031 General Safety Requirements for Radio Equipment

A European standard, “EN 18031 General safety requirements for radio equipment”, consists of the following sub-parts published under the same title:

• The standard “EN 18031-1 Part 1: Internet-connected radio equipment” describes the common safety requirements and associated evaluation criteria for Internet-connected radio equipment.

For the purposes of this standard, the following terms and definitions apply:

• Access control mechanism refers to the function of granting, restricting or denying access to resources of a particular equipment. Access to resources of a particular equipment can be, among others:
  • Reading specific data
  • Writing specific data to the equipment's permanent storage
  • Performing a specific equipment function, such as recording sound.
• Authentication refers to providing assurance that an entity is who or what it claims to be. An entity may, among other things, claim to be:
  • A specific person is the owner of a user account, device or service.
  • A member of certain groups, such as a group authorized to access a resource of certain equipment
  • Authorized by another entity to access a resource of a specific piece of equipment.
• Authentication mechanism refers to the equipment function to verify that an entity is who or what it claims to be. Typically, verification is based on examination of evidence from one or more of the categories: knowledge, possession, and birth.
• An authenticator is something known or owned and controlled by an entity that is used for authentication. Typically, it is a physical device or a password.
• The assessment objective is the statement provided as part of the assessment input that defines the reasons for conducting the assessment.

For the purposes of this standard, the following terms and definitions apply:

• Best practice refers to measures that have been shown to provide appropriate security for the corresponding use case.
• A brute force attack is an attack on a cryptosystem that uses a trial-and-error search for a set of keys, passwords, or other data.
• A communications mechanism is an equipment function that allows communication over a machine interface.
• A secret cryptographic key is a secret security parameter, excluding passwords, used in the operation of a cryptographic algorithm or cryptographic protocol.
• Confidential personal information is personal information whose disclosure may endanger the privacy of the user or subscriber.
• A hidden privacy function configuration is a privacy function configuration whose disclosure may compromise the privacy of the user or subscriber.
• A hidden security parameter is a security parameter whose disclosure may compromise the privacy of the user or subscriber.
• Denial of service is the denial or interruption of authorized access to an equipment resource or the delay of equipment operations and functions.

For the purposes of this standard, the following terms and definitions apply:

• Device refers to the product other than the equipment.
• An entity refers to a user, device, equipment, or service.
• Entropy is a measure of the disorder, randomness, or variability in a closed system.
• An external interface is an interface to an equipment that can be accessed from outside the equipment.
• Factory default state refers to the defined state in which the equipment's configuration settings and configuration are set to their initial values. The factory default state may include security updates installed after the equipment was released.
• Financial asset is sensitive financial data or confidential financial data or sensitive financial function configuration or confidential financial function configuration or financial functions.
• Financial data is data that represents, provides information about, or is processed to transfer money, monetary assets, or virtual currencies.
• A storage mechanism is an equipment function that allows information storage.
• The update mechanism is the equipment function that allows changing the software of the equipment.
• The user interface is the external interface between the equipment and the user.
• Vulnerability refers to a weakness, design, or implementation error that could lead to an unexpected, undesirable event and compromise the security of the associated equipment, network, application, or protocol.

Our organization, which has been trying to support businesses from every sector with its testing, measurement, analysis and evaluation studies carried out in a wide range for years, has a strong staff that closely follows the developments in the world in the field of science and technology and constantly improves itself. In this context, testing services in accordance with the "EN 18031 General safety requirements for radio equipment" standard are also provided to businesses.