On 25 March 2025 the Japanese Ministry of Economy, Trade and Industry (METI) and the Information-technology Promotion Agency (IPA) announced the launch of the Japan Cyber Security Technical Assessment Requirements (JC-STAR) voluntary certification labelling scheme. Internet of things (IoT) devices that can send and receive data over the internet using IP, and IoT devices connected indirectly to the internet, fall within the scope of this voluntary scheme. The scheme has four product categories. STAR-1 and STAR-2 labels can be granted through self-declaration, while STAR-3 and STAR-4 labels are granted after assessment by a third-party laboratory.

About the label

The JC-STAR label contains a QR code that links through the IPA to a website for the labelled product, carrying details such as supplier information, product information, label information, security information covering any updates or vulnerabilities and contact information. Examples of labels containing the QR code are shown below.

Label

Scheme mark

The JC-STAR STAR-1 label is valid for two years, and the IPA will publish the list of labelled products in early May 2025. Conformity criteria for STAR-2, STAR-3 and STAR-4 products are still being developed.